DEM Access Scan - Resulting Access Mode for DEM Authorizations

DEM Access Scan - Resulting Access Mode for DEM Authorizations

Upon completion of the DEM Import (all versions) the Compliance Access Scan, generates the authorizations based on the loaded DEM data. The following cascade logic is applied to set the Access Mode (privilege) of the resulting authorization record.

1)      Utility-Session Access Mode (only when scanning with Utilities)

Utility is also referred to as Support Application. If the session is part of a Support Application, the Access Mode is taking from this relationship. If there is an Access Mode defined, this one Access Mode is used, otherwise the cascade goes to step 2.

 

2)      Activity-Role Access Mode

The access mode is determined based on the Access Mode as is defined on the (DEM) Role – Activity Relationship. If there is an Access Mode defined, this one Access Mode is used, otherwise the cascade goes to step 3.

 

Note: If the check mark Use Activity Authorizations is set this step is skipped

 

3)      Activity Access Mode

The Access Mode as set for the Activity is applied to the Authorization. If there is an Access Mode defined, this one Access Mode is used, otherwise the cascade goes to step 4.

 

4)      Process-Role Access Mode

The access mode is determined based on the Access Mode as is defined on the DEM Process (Diagram) and (DEM) Role Relationship. If there is an Access Mode defined, this one Access Mode is used, otherwise the cascade goes to step 5.

 

5)      Activity vs Process-Role

In the situation that the Activity (step 3) AND the Process-Role (step 4) both have an Access Mode defined, the Access Mode that has the lowest associated Access Level will be assigned.

 

6)      Generic Access Mode (Access Point’s Access Mode)

If the previous steps could not determine the Access Mode as defined on the Access Point level is to be used (if not empty).

 

7)      No Access Mode

If all previous steps could not determine the Access Mode of the Authorization will be left blank.