Entitlement Optimization What If

What If shows the probable justification for entitlement of a specific user with one or more specific verbs on a specific object (regardless of whether or not the entitlement exists).

Data is available in this tab from the first Sunday after you enabled the feature.

Guardium analyzes the behavior of similar users to produce the probable justification, which is some cases provides highly relevant information. The analysis can be useful when you examine unused entitlements, and the REVOKE_FROM_USER recommendation. It is a general indication, and should be used together with other entitlement optimization functions.

Enter these details and click OK to generate the probability:

• User name
• Object name
• Verb (one or more)
• Server IP
• Service name

Possible responses are:

• The probability that this DB user will use this privilege is n%. Probability of 100% indicates that the user used the activity at least once.
• Failed to find data source on server.
• Object and DB user are not in scope.
• No sufficient evidence found for DB user and privilege: either the User / Object / Verb does not exist in the selected database, or no activity is found for the user, or no activity has been found for the object, verb tuple. Possible fixes: wait for activity collection to run; make sure the input is entered correctly.