Skip to main content

Conflicts — Users

The Conflicts — Users screen is the distinct list of users with at least one SoD conflict on a connected application. One line per (Application, User) pair. Each row carries the account's status, creation date and last login — exactly what is needed to decide how to remediate.

If Summary shows how many conflicts you have and Details shows what they look like, this screen is who the conflicts belong to.

At a glance​

Nomasx-1 · Applications · Conflicts · UsersAPPUSER IDSTATUSCREATEDLAST LOGIN12JDOEActive2019-03-142026-05-1412MSMITHActive2020-09-022026-05-1312LEGACY01Inactive2014-06-222022-08-1921PKHANActive2022-01-152026-05-12

Goal of the view​

For each user in conflict on a connected application:

  • Identify the holders. A single line per user — easier to dispatch the remediation actions across business owners than reading the per-row Details.
  • Read context for the action. Status + Creation + Last Login tell whether the easiest remediation is a deactivation (Inactive accounts) or a role cleanup (Active accounts with conflicts).
  • Spot zombie conflicts. An Inactive user still appearing here proves the underlying conflict is structural — even after the user is gone, their role wallet still produces theoretical SoD risk. Tighten the role design rather than rely on the deactivation.

Columns​

ColumnSourceWhat it tells you
Application IDCFD_APPS_ID — application identifier.The application the conflict belongs to.
User IDCFD_USER_ID — user in conflict.The conflict holder.
StatusUSR_STATUS — 01 means Active.Source-system status — drives the remediation choice.
Creation DateUSR_DT_CREATION — date.When the account was created.
Login DateUSR_DT_LOGIN — date.Last authentication. A long-dormant active user with conflicts is the lowest-hanging fruit.

Tips & best practices​

  • Sort by Last Login descending — the users actively connecting carry the most operational risk. Deal with them first.
  • Filter on Inactive status to find conflicts on already-disabled accounts. They are easy to close but a sign that the role design still allows the combination.
  • Combine with Conflicts — Details via the same user filter to read the conflict story of a single person before contacting them.
  • Click a row to open the Users Audit screen for that user — the full role + activity picture in one place.