You can download SoD policies and import them later into an Identity Governance environment. The download will generate either a single JSON file or a Zip file, depending on the options you select during download, such as associated applications and referenced roles. In addition to downloading the SoD policy definitions, you can download the list of SoD policies as a CSV file.
To download and import SoD policies:
Log in as a Customer, Global, or Separation of Duties Administrator
Select Policy > SoD.
To download a list of policies with the name, description, and state as a CSV file, select Actions > Download all as CSV in the Separation of Duties Policies tab.
To download one or more policy definitions:
Select one or more policies from the list, then click Actions > Download Definitions.
Type the policy name or a meaningful description.
(Optional) Download included references, associated applications, business roles, and technical roles.
Click Download.
Select the download icon on the top title bar to access the saved file and download the file.
(Optional) Delete the downloaded files from the download area in Identity Governance.
NOTE:If you do not manually delete files, Identity Governance will automatically delete files based on your default download retention day settings. For information about customizing download settings, see Section 3.9, Customizing Download Settings.
To import separation of duties policies:
Log in as a Customer, Global, or Separation of Duties Administrator
Select Policy > SoD.
Click Import Separation of Duties Policies.
Navigate to the JSON or Zip file, select the file you want to import, and click Open.
NOTE:Identity Governance detects whether you are importing new or updated policies and whether the updates would create any conflicts.
Specify how to continue based on the information displayed.
(Conditional) If you import more than the preconfigured threshold for the number of policies that can be displayed on the import page, Identity Governance will switch to bulk import mode. When in bulk mode, instead of selecting whether to create, update, or handle conflicts for specific policies, you can select to import all new policies and update all existing policies. For conflicts, you can choose to either overwrite existing policies or create new policies.
NOTE:The default value for policies that can be displayed is 200. If you need to change the default value, the Global Administrator can use the Advanced Configuration menu to add the com.netiq.iac.importExport.maxImportsToDisplay property and specify a new value.
(Optional) Download the auto-generated import report from the download area. The import report will identify what was imported as well as call out any unresolved references.