Knowledge base

Knowledge base / Analysis and remediation

Access DNA and the investigation panel

Access DNA is ClearDuty's map of how access becomes risk. For one user it draws every path: user → composite role → single role → t-code and authorization value → business function → risk. It turns the evidence behind a finding into one picture a business owner can follow.

Reading the map

UserThe person being analysed (dark box).
CompositeComposite roles the user holds; dashed outline.
RoleSingle roles that grant something used by a risk; green outline.
T-code and AuthorizationThe transaction and the authorization object and values. A function needs both.
FunctionOne side of a risk, such as "Run the payment program".
RiskColoured by level. A dashed outline means a valid mitigating control covers it.

Hover over — or tab to — any box: every path through it is highlighted and everything else fades. Hover a role to see exactly which risks depend on it; hover a risk to see every role that feeds it.

Every box is an action

The investigation panel

Select Investigate on the dashboard (users and risks tables), click a risk in Access DNA, or pick a user or risk in the search (Ctrl K). A panel opens on the right with the Access DNA, the evidence, the ways to fix it, Fix this user, Simulate, Add a control and the remediation decision — so you never have to go back to the dashboard. Back steps through what you opened; Esc closes the panel, and a gold ↩ Investigation link in the breadcrumbs reopens it exactly where you were.

Nothing is lost

The screen, filters, selection, Remediation Studio user and open investigation are kept in this browser, so a reload or a closed tab brings you back to the same place. Decisions — a remediation status, a control, a plan, an approval, a rule switched off — show an Undo bar for a few seconds (Ctrl Z works too).

Still stuck? Ask us — we answer within one working day.