Separation of Duties

Separation of Duties (SoD) Policies are policies that you can author to raise flags known as SoD Violations when unacceptable combinations of group or role assignments are granted to any one person. An example of such a violation could include assigning a person to a Management Role that allows for the writing of RBAC policy while simultaneously belonging to a Management Role that allows that same person to approve any violations occurring to those policies. 


Getting Started





Separation of Duties Overview

Separation of Duties Overview

Creating SoD Policies

Creating SoD Policies

Compiling SoD Policies

Compiling SoD Policies

Reviewing SoD Violations

Reviewing SoD Violations