Manage separation of duties rules

After you modify or delete an SOD rule, the change affects all scheduled campaigns and new access requests that a user submits. Active campaigns and access requests submitted before the SOD rule change aren't impacted.

Before you begin

Sign in as a super admin or an admin with the Manage separation of duties (SOD) risk rules and Manage applications permissions. A custom role must have a resource set that includes the Risk Rules resource type. See Custom admin roles, Role permissions, and Create a resource set.

Edit a rule

  1. In the Admin Console, go to ApplicationsApplications.

  2. Find and select the app to create an SOD rule for.
  3. Go to Governance Separation of duties.
  4. Find the rule that you want to edit and select Edit from its menu.
  5. Make your changes to the rule and then click Save.

Delete a rule

  1. In the Admin Console, go to ApplicationsApplications.

  2. Find and select the app whose SOD rule you want to delete.
  3. Go to GovernanceSeparation of duties.
  4. Find the rule that you want to delete and select Delete from its menu.
  5. Click Delete rule to permanently delete the rule.

Related topics

Create separation of duties rules

Understand separation of duties conflicts

Get started with separation of duties