Change Separation of Duty Policy
Use this page to change a separation of duty policy.
- Policy name
- Provide the name of the separation of duty policy.
- Description
- Provide additional information about the policy. For example, the description can state the policy name, who created the policy, the date the policy was created, and a reason why the policy exists.
- Business unit
- Select the business unit. To locate an available business unit, click Search. Setting the business unit allows you to customize which user can administer the policy.
- Policy Rules table
- Lists the policy rules. The table contains these columns:
- Select
- Specifies a policy rule. To select one or more policy rules, select the check box next to the policy rule. To select all policy rules, select the check box at the top of the column.
- Description of Separation
- Type a description for the policy rule. For example, you might describe a rule that you add to a policy as People in the IT department cannot be given accounting responsibilities.
- Allowed Number of Roles
- Identifies how many roles to which a user can belong.
- Roles
- Identifies the roles that are associated with the policy rule.
You can use these buttons with the Policy Rules table:- Create
- Click to create a policy rule.
- Change
- Click to change the selected policy rule.
- Delete
- Click to delete one or more selected policy rules.
To modify the list of roles and users that have
ownership of the policy, click the
icon
adjacent to Policy Owners.

- Role Policy Owners table
- Add or remove one or more organizational roles as owners for the
separation of duty policy. The table contains these columns:
- Select
- Specifies a role. To select one or more roles, select the check box next to the role. To select all roles, select the check box at the top of the column.
- Role Name
- Identifies the name of the role.
- Role Description
- Provides additional information about the role.
- Business Unit
- Identifies the business unit to which the role applies. Click the link for more information about the business unit.
- User Policy Owners table
- Add one or more users as owners for the separation of duty policy.
The table displayed is dependent on the policy owner type specified.
The table contains these columns:
- Select
- Specifies a user. To select one or more users, select the check box adjacent to the user. To select all users, select the check box at the top of the column.
- Full Name
- Identifies a value for distinguishing a user, such as the user's full name. Click the name of the user to view the user's personal profile..
- E-mail Address
- Identifies the user's e-mail address.
- Last Name
- Identifies the user's last name.
- Business Unit
- Identifies the business unit associated with the user.
You can use these buttons with the Role Policy Owners table or the User Policy Owners table:- Add
- Click to add a role or user to the list. A search panel will open from which you can select the appropriate roles or users.
- Remove
- Click to remove one or more roles or users from the list.
- Policy state
- Select the status of the policy. Click Enabled to use the policy and make it active. Click Disabled to make the policy inactive.
Click Submit to save the policy and continue after you have specified the required information for the policy.