SoD Policies

Segregation of Duties policies define conflicting role combinations that no single user should hold simultaneously. CoreLink ships with 20 built-in SoD templates covering common conflicts (e.g., "cannot hold both Secrets Admin and Audit Admin"). Custom policies can be defined by specifying role pairs and the conflict severity (block or warn).

The SimulateGrant API evaluates every proposed access grant against active SoD policies before the grant is persisted, preventing violations at the source rather than detecting them after the fact.

Key Configuration

• Policy template selection (20 built-in templates)
• Custom role pair definitions
• Conflict severity (block / warn)
• Exception approval workflow