Separation of Duties (SoD) Policies are policies that you can author to raise flags known as SoD Violations when unacceptable combinations of group or role assignments are granted to any one person. An example of such a violation could include assigning a person to a Management Role that allows for the writing of RBAC policy while simultaneously belonging to a Management Role that allows that same person to approve any violations occurring to those policies.
Getting Started
Separation of Duties Overview
Creating SoD Policies
Compiling SoD Policies
Reviewing SoD Violations