This section describes how to configure and set up segregation of duties. Segregation of duties is an internal control that prevents a single user from performing two or more phases of a transaction or operation.

Overview
Explains the purpose of segregation of duties, including usage examples. Introduces key segregation of duties concepts.

Planning a Segregation of Duties System
Outlines how to plan your segregation of duties system by creating a high-level overview of your business environment.

Segregation of Duties Rule Checking
Discusses the role permissions and role membership rules that segregation of duties enforces.

Completing Prerequisite Activity
Describes the prerequisites that must be met before you can implement segregation of duties.

Activating Segregation of Duties
Describes how to activate segregation of duties and how to block any changes to role-based security that would allow users to access conflicting resources.

Maintaining Segregation of Duties Categories
Outlines how to create, modify, view, and delete segregation of duties categories.

Assigning Resources to Segregation of Duties Categories
Describes how to associate an application resource with a segregation of duties category.

Maintaining the Segregation of Duties Matrix
Discusses how to define the compatibility of segregation of duties categories.

Defining Role Permissions
Outlines how the associations between roles and functions are constrained by segregation of duties policy.

Defining Role Membership
Describes how the associations between users and roles are constrained by segregation of duties policy.

Maintaining Segregation of Duties Policy Exceptions
Discusses segregation of duties policy exceptions, which provide a specified user with access to a pair of resources that are not compatible under segregation of duties policy.

Segregation of Duties Role Exclusions
Outlines how you can specify that a particular role is exempt from segregation of duties rule checks and blocking.

Importing and Exporting Segregation of Duties Data
Describes how you can create and load default data for segregation of duties categories, matrices, and resource assignments using Excel and XML.

Reporting and Viewing Logs and Violations
Lists the reports and views that let you review segregation of duties violations.

Archiving Log Record Files
Discusses how to archive log records when an online history of segregation of duties violations is no longer needed.