We have SoD violation checks for various roles and entitlements, but when users are transferring between roles in the organization, there might be violations that don't really overlap due to the timing of when they start their new role.
Is there a way to check for the user's effective dates on rules? For Example, if the (Valid Until of old PersonWantsOrg) and (Valid From of the requested Org in the itShop) don't overlap, then allow the request to go through without triggering an violation? We do have exception allowance/approvals but we don't want to initiate a violation check if it doesn't need it.
OIM ver 8.0.2