Define separation-of-duties rules that flag conflicting role assignments.
SoD Policies is where admins manage separation-of-duties rules. It has two sections: System Defaults (pre-built, read-only policies) and Custom Policies (your own rules). Each policy has a name, description, framework, severity, and a pair of role patterns that define the conflict, plus a live violation count.
Open Settings → SoD Policies.
Click Import template to bulk-add pre-built policy sets (Finance, IT / Engineering, HR, DevOps, Healthcare).
Click Create policy to build a custom rule — set the name, framework, severity, and the two conflicting role patterns.
Toggle a custom policy on or off, or use the edit and delete icons to manage it.
Watch the violation count per policy, and follow conflicts into the Directory and Access Insights SoD matrix.
Jump straight to the feature, or browse the rest of the guides.