You can use One Identity Manager to assess the risk of assignments. The assessments can be evaluated separately by role. Prerequisite is that service items are assigned to the roles. For more information about risk assessment, see the One Identity Manager Risk Assessment Administration Guide.