Use Role Membership Maintain (36.3.6.6) to associate users and user roles. The associations you create between users and roles in this step are now constrained by the defined segregation of duties policy.

For more information on defining role membership, see Defining Role Membership.