AAG Risk Ruleset for Salesforce

Developed by Saviynt

Overview

Separation of duties (SOD) and sensitive access risk rulesets identify access risks that require monitoring, mitigation, or remediation.
 
Integration between Saviynt and Salesforce enables organizations to evaluate SOD and sensitive access risks by user, profile, or permission set at custom/object/system permission levels, as well as at various other levels, including Apex classes.

Saviynt's standard ruleset for Salesforce includes 10+ risks across the Order to Cash and Information Technology (IT) processes. Each risk is mapped to specific business/IT activities with detailed entitlements (i.e., fine-grained) at the object and system permission levels. The ruleset also permits combining broader entitlements (i.e., coarse-grained), such as Salesforce permission sets, profiles, and roles.

Features

Saviynt’s Application Access Governance (AAG) solution provides standard risk rulesets and controls for various applications, empowering organizations to effectively manage access risks, streamline remediation, and minimize both potential and actual violations. They enable quick implementation of SOD and sensitive access controls, delivering rapid time-to-value (TTV). Saviynt's standard risk rulesets include:

  • Risks
  • Risk descriptions
  • Business processes
  • Business and IT functions (i.e., activities) mapped to fine-grained entitlements, typically at the most granular application level