Interpret Access Model Results

An access model returns a grid. Each row consists of information about the path through which a user is assigned one of the access points involved in a conflict. Typically, a single access conflict involves assignments documented in more than one row.

In each row, results include these values:

• An Incident Information column reports the path to the access point that's the focus of the result record. It uses display names to identify roles in the path, but display names may not be unique.

• An Incident Information Codes column reports the same access path, but it uses role codes to identify roles in the path. Every role code is unique.

• A Group column identifies any access points that conflict with the Incident Information access point.

• Role and Conflicting Roles columns identify the roles that grant access to these access points.

• A Data Source column identifies the data source in which the Incident Information path exists.

Other columns are self-explanatory. You may find that some of the columns you want to see are hidden by default. Click View > Columns to select the columns appropriate for your purposes.

In some cases, the assignment of a single role grants rights to access points a model defines as conflicting. You can filter the model results to display only those conflicts. Click the Conflicts within a single role check box.