Zetect Usage Guide Admin PortalSwitch portal ⇄

Segregation of Duties Rules

SoD rules express combinations of access that must never be held by one person — the classic example being the ability both to raise and to approve a payment.

Segregation of Duties Rules screen
Segregation of Duties Rules — captured from the h-technova tenant.

How to use it

  1. Open Provisioning Risk → SoD Rules and add a rule.
  2. Select the two conflicting entitlements.
  3. Choose whether a violation is blocked or held for review.
  4. Save. Requests that would create the conflict are then caught.

Field reference

FieldDescription
Conflicting entitlementsThe pair that may not be held together.
EnforcementBlock outright, or hold for review.

Example — Dummy SoD rule

NamePayment Segregation
Entitlement AAP — Create Payment
Entitlement BAP — Approve Payment
EnforcementBlock