Manage access entitlements for access algorithms

Redwood Platform

Define and manage access entitlements used by access algorithms, such as Sensitive Access Monitors and Segregation of Duties (SoD) Access Monitors. An entitlement defines access points and supports flexible logical evaluation.

Access points defined on separate entries use OR logic, while multiple access points within the same entry use AND logic.

After you publish an entitlement, you can map it to an algorithm. The Used by Algorithms section shows the mapped algorithms, including algorithm type.

The Entitlements list includes each entitlement’s reference code, name, short description, data source, usage count for published algorithms, associated process information, and status. Use smart search and the status, process, and data source filters to refine the list. Entitlements have a default status of Published.

Based on their authorization, users can create, copy, edit, share, archive, restore, move to trash, import, export, and request access to entitlements.

Business benefit

Centralized entitlement management helps you find and maintain the entitlements used by access algorithms, understand where they are used, and control access to individual records.

Steps to enable and configure

To navigate to this feature:

  1. From the Newsfeed home page, open Risk Management.
  2. In the Algorithm module, select Entitlements from the in-app navigation.

Tips and considerations

  • Delivered entitlements allow updates only to status, stakeholders, and comments.
  • To copy an entitlement, you must have the Create Entitlement privilege. Enter a unique reference code for the copy. The copied name includes (Copy), and comments aren't copied.
  • Export excludes entitlements that are archived or in trash.
  • The list can display a message when another user is editing an entitlement.

Access requirements

Entitlement access is controlled through stakeholders. Users can view only entitlements for which they have explicit authorization. When the All Employees participant group is assigned, users can view the entitlement in the list. Additional actions, including edit and copy, depend on the user’s authorization and applicable privileges.

For access details, refer to Risk Management secured record access framework in this What’s New.