Access Control for SoD Roles

There are three primary actors responsible for maintaining a SoD policy:

SoD Admin- An admin can create the policy and add the SoD owner and reviewer. The policy created by him stays in Draft mode. 

SoD Owners- An owner can create the policy, review the policy and accept/reject the violations.

SoD Reviewer- As the name suggests, a reviewer can review the policy, however, does not have the right to create them.

The submenus under the SoD module would be:

• Summary
• SoD Policies
• SoD Violations

The below table shows the level of control each SoD actor has: