Advanced Access Controls Analyst (Job Role)
Individual responsible for managing and auditing enterprise advanced access controls.
Role Hierarchy
The Advanced Access Controls Analyst job role directly and indirectly inherits these roles.
-
Advanced Access Controls Analyst
-
Access Control Manager
-
Access Control Manager Viewer
-
Access Incident Results Manager
-
Access Incident Results Manager Viewer
-
Access Model Manager
-
Access Model Manager Viewer
-
Access Provisioning Rules Manager
-
Advanced Access Control Model Transaction Analysis
-
Advanced Access Control Transaction Analysis
-
Advanced Controls Administrator
-
Risk Management Folder Reporting
-
Upload data for GRC Attachments
-
Duties
This table lists the duties assigned directly and indirectly to the Advanced Access Controls Analyst job role.
Duty Role | Description |
---|---|
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Access Control Manager Viewer |
View access controls and user-defined access points in Advanced Controls. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Access Model Manager Viewer |
View access models, entitlements, and global conditions in Advanced Controls. |
Access Provisioning Rules Manager |
Allows access to define provisioning rules and perform role analysis. |
Advanced Access Control Model Transaction Analysis |
BI duty role to analyze Advanced Access Control Models transactional information. |
Advanced Access Control Transaction Analysis |
BI duty role to analyze Advanced Access Controls transactional information. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Risk Management Folder Reporting |
Grants access to the Risk Management web catalog folder. |
Upload data for GRC Attachments |
Allows to upload data file to import GRC attachments. |
Privileges
This table lists privileges granted to duties of the Advanced Access Controls Analyst job role.
Granted Role | Granted Role Description | Privilege | Privilege Description |
---|---|---|---|
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Cancel Job |
Ability to cancel a job if applicable |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Conditions Report |
Allows submission and viewing of the Conditions Report |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Control Detail Extract Report |
Allows submission and viewing of Advanced Control Detail Extract Report |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Create Access Control and Assign Result and Control Users |
Allows for the creation of access controls and assignment of users. |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Create Access Global Condition |
Allows creating an Access Global Condition |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Create User-Defined Access Points |
Allows creating and copying a User-Defined Access Point |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Delete User-Defined Access Points |
Allows deletion of a User-Defined Access Point |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Edit Access Controls |
Allows for the editing of access controls. |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Edit Access Entitlements |
Ability to edit an Access Entitlement |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Edit Access Global Condition |
Allows for the editing an Access Global Condition |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Edit Access Points on Entitlement |
Allows for the editing Access Points in an Entitlement |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Edit Schedule |
Allows for the editing of a Schedule |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Edit User-Defined Access Points |
Allows editing a User-Defined Access Point |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Entitlement Report |
Allows submission and Viewing of the Entitlement Report |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Export Access Global Condition |
Allows for the export of Access Global Conditions |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Export Advanced Controls |
Allows for the export of Advanced Controls |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Import Access Global Conditions |
Allows for the import of Access Global Conditions |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Run Advanced Control Analysis |
Allows for the running of Advanced Controls |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
Schedule Advanced Control Analysis |
Ability to schedule Advanced Control analysis |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
View Access Controls |
Allows for the viewing of access controls. |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
View Access Entitlements |
Allows for the viewing of access entitlements. |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
View Access Global Conditions |
Allows for the viewing of access global conditions. |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
View Monitor Jobs |
Allows for the viewing of monitor jobs. |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
View Scheduling |
Allows for the viewing of scheduled jobs. |
Access Control Manager |
The access control manager is responsible for defining and managing controls and user-defined access points in Advanced Controls. |
View User-Defined Access Point Details |
Allows viewing of the User-Defined Access Point details |
Access Control Manager Viewer |
View access controls and user-defined access points in Advanced Controls. |
Conditions Report |
Allows submission and viewing of the Conditions Report |
Access Control Manager Viewer |
View access controls and user-defined access points in Advanced Controls. |
Control Detail Extract Report |
Allows submission and viewing of Advanced Control Detail Extract Report |
Access Control Manager Viewer |
View access controls and user-defined access points in Advanced Controls. |
Entitlement Report |
Allows submission and Viewing of the Entitlement Report |
Access Control Manager Viewer |
View access controls and user-defined access points in Advanced Controls. |
View Access Controls |
Allows for the viewing of access controls. |
Access Control Manager Viewer |
View access controls and user-defined access points in Advanced Controls. |
View Access Entitlements |
Allows for the viewing of access entitlements. |
Access Control Manager Viewer |
View access controls and user-defined access points in Advanced Controls. |
View Access Global Conditions |
Allows for the viewing of access global conditions. |
Access Control Manager Viewer |
View access controls and user-defined access points in Advanced Controls. |
View User-Defined Access Point Details |
Allows viewing of the User-Defined Access Point details |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Access Incident Details Extract Report |
Allows submission and viewing of Access Incident Details Extract Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Access Point Report |
Allows submission and viewing of Access Point Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Access Violations By User Report |
Allows submission and viewing of Access Violations by User Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Access Violations within a Single Role Intra-role Report |
Allows submission and viewing of Access Violations within a Single Role Intra-role Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Assign Access Result Users |
Allows for the user assignment of access incidents. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Cancel Job |
Ability to cancel a job if applicable |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Create Access Simulation |
Allows for the creation of an access result simulation. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Delete Access Simulation |
Allows deleting of an access simulation. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Edit Access Incident Results |
Allows for the editing of access incident results. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Edit Access Simulation |
Allows user to edit an access simulation. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Global Users Report |
Allows submission of the Global Users Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Intra-role Violations by Control Report |
Allows submission and viewing of the Intra-role Violations by Control Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Result By Control Summary Extract Report |
Allows submission and viewing of the Control Summary Extract Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Result Summary Extract Report |
Allows submission and viewing of the Result Summary Extract Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Run Access Simulation Statistics |
Allows user to run access simulation analysis. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
Users with Access Violations by Control Report |
Allows submission and viewing of the Users with Access Violations by Control Report |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
View Access Incident Results |
Allows for the viewing of access incident results. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
View Access Simulations |
Allows viewing of access simulations. |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
View Global User Configuration in Application Configurations |
Allows viewing of the Global User Configuration |
Access Incident Results Manager |
The access incident results manager is responsible for review, remediation, and running simulations of incidents in Advanced Controls. |
View Monitor Jobs |
Allows for the viewing of monitor jobs. |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Access Incident Details Extract Report |
Allows submission and viewing of Access Incident Details Extract Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Access Point Report |
Allows submission and viewing of Access Point Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Access Violations By User Report |
Allows submission and viewing of Access Violations by User Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Access Violations within a Single Role Intra-role Report |
Allows submission and viewing of Access Violations within a Single Role Intra-role Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Global Users Report |
Allows submission of the Global Users Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Intra-role Violations by Control Report |
Allows submission and viewing of the Intra-role Violations by Control Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Result By Control Summary Extract Report |
Allows submission and viewing of the Control Summary Extract Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Result Summary Extract Report |
Allows submission and viewing of the Result Summary Extract Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
Users with Access Violations by Control Report |
Allows submission and viewing of the Users with Access Violations by Control Report |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
View Access Incident Results |
Allows for the viewing of access incident results. |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
View Access Simulations |
Allows viewing of access simulations. |
Access Incident Results Manager Viewer |
View access incident results and simulations in Advanced Controls. |
View Global User Configuration in Application Configurations |
Allows viewing of the Global User Configuration |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Cancel Job |
Ability to cancel a job if applicable |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Create Access Entitlement |
Allows creating an Access Entitlement |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Create Access Global Condition |
Allows creating an Access Global Condition |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Create Access Model and Assign Users |
Allows for the creation of access models and assignment of users. |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Create User-Defined Access Points |
Allows creating and copying a User-Defined Access Point |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Delete User-Defined Access Points |
Allows deletion of a User-Defined Access Point |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Edit Access Entitlements |
Ability to edit an Access Entitlement |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Edit Access Global Condition |
Allows for the editing an Access Global Condition |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Edit Access Model |
Allows for the editing of access models. |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Edit Access Points on Entitlement |
Allows for the editing Access Points in an Entitlement |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Edit User-Defined Access Points |
Allows editing a User-Defined Access Point |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Entitlement Report |
Allows submission and Viewing of the Entitlement Report |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Export Access Global Condition |
Allows for the export of Access Global Conditions |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Export Models |
Allows for the export of Advanced Control models |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
Import Access Global Conditions |
Allows for the import of Access Global Conditions |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
View Access Entitlements |
Allows for the viewing of access entitlements. |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
View Access Global Conditions |
Allows for the viewing of access global conditions. |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
View Access Model |
Allows viewing of Access Models |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
View Global User Configuration in Application Configurations |
Allows viewing of the Global User Configuration |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
View Monitor Jobs |
Allows for the viewing of monitor jobs. |
Access Model Manager |
The access model manager is responsible for defining and managing models, entitlements, global conditions, and user-defined access points in Advanced Controls. |
View User-Defined Access Point Details |
Allows viewing of the User-Defined Access Point details |
Access Model Manager Viewer |
View access models, entitlements, and global conditions in Advanced Controls. |
Entitlement Report |
Allows submission and Viewing of the Entitlement Report |
Access Model Manager Viewer |
View access models, entitlements, and global conditions in Advanced Controls. |
View Access Entitlements |
Allows for the viewing of access entitlements. |
Access Model Manager Viewer |
View access models, entitlements, and global conditions in Advanced Controls. |
View Access Global Conditions |
Allows for the viewing of access global conditions. |
Access Model Manager Viewer |
View access models, entitlements, and global conditions in Advanced Controls. |
View Access Model |
Allows viewing of Access Models |
Access Model Manager Viewer |
View access models, entitlements, and global conditions in Advanced Controls. |
View Global User Configuration in Application Configurations |
Allows viewing of the Global User Configuration |
Access Model Manager Viewer |
View access models, entitlements, and global conditions in Advanced Controls. |
View User-Defined Access Point Details |
Allows viewing of the User-Defined Access Point details |
Access Provisioning Rules Manager |
Allows access to define provisioning rules and perform role analysis. |
Create Access Provisioning Rules |
Allows user to create a provisioning rule. |
Access Provisioning Rules Manager |
Allows access to define provisioning rules and perform role analysis. |
Delete Access Provisioning Rules |
Allows user to delete a provisioning rule. |
Access Provisioning Rules Manager |
Allows access to define provisioning rules and perform role analysis. |
Edit Access Provisioning Rules |
Allows user to edit a provisioning rule. |
Access Provisioning Rules Manager |
Allows access to define provisioning rules and perform role analysis. |
Use REST Service for Advanced Access Control Role Analysis |
Allows users to call all methods associated with the advanced access control role analysis REST resource |
Access Provisioning Rules Manager |
Allows access to define provisioning rules and perform role analysis. |
View Access Provisioning Rules |
Allows user to view provisioning rules. |
Advanced Access Controls Analyst |
Individual responsible for managing and auditing enterprise advanced access controls. |
View Risk Management Dashboard |
Allows viewing of the analytic information on the Risk Management dashboard. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Cancel Job |
Ability to cancel a job if applicable |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Create and Edit Business Object Security |
Allows user to manage business object security for transaction controls. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Edit Access Performance Configuration |
Allows for the editing of advanced access configurations for performance. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Edit Currency Conversion Configuration |
Allows for the editing of advanced transaction configurations for currency conversion. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Edit Global User Configuration in Application Configurations |
Allows the editing of Global User Configuration |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Edit Schedule |
Allows for the editing of a Schedule |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Manage Additional Advanced Control Data Sources |
Allows for the configuration of additional advanced control data sources. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Purge Advanced Control Results |
Allows running of Purge Results for Advanced Controls |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Purge Jobs |
Allows for the purging of Jobs |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Rebuild Graph |
Allows for the rebuilding of the Transaction Data Graph |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Run Scheduled Job Now |
Allows for the on demand running of a Scheduled Job |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Run and Schedule Global Users |
Allows for the running and scheduling of Global User Configurations |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Schedule Synchronizations |
Ability to schedule Graph Synchronizations |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
Synchronize Transaction Data Source |
Ability to initiate the Transaction graph synchronization for a data source |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
View Additional Advanced Control Data Sources |
Allows for the viewing of additional advanced control data sources. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
View Advanced Controls Configuration |
Allows for the viewing of advanced controls configurations for performance. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
View Global User Configuration in Application Configurations |
Allows viewing of the Global User Configuration |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
View Monitor Jobs |
Allows for the viewing of monitor jobs. |
Advanced Controls Administrator |
Defines and manages setup and administration tasks for Advanced Controls. |
View Scheduling |
Allows for the viewing of scheduled jobs. |