Hi!

I have a question related to how IG (3.0) calculates user risk.

I am looking at a user with 64 permissions (looking at the User from Catalog/User/<user> and tab Permissions.

When I look at the Risk Factors tab for this user, the Base Score for "Risk of permissions assigned to the user" is set to 102.

Looking at Policy/Risk/User Risk Score, I have configured "Number of permissions assigned to the user" with Low range 30 and High range 150.

Why is the Base Score for "Risk of permissions assigned to the user" is set to 102?

I have tried to understand the documentation in this regard, but I fail to make sense of it.

Also, I have another question. Is it possible to display the risk specified for each permission in a review? So far I have only been able to display the User calculated risk, and not the risk set for the permission.

Best regards
Marcus