To configure the separation of duties (SoD) settings:

1. Click Configure Roles and Resources Settings in the Configuration group of actions.

2. Scroll to the Separation of Duties (SoD) Settings section of the page.

   

   The SoD Container setting is a read-only setting that is fixed at installation time.

   • SoD Container

   • Default SoD Approval Definition

3. In the SoD Approval Definition field, choose the provisioning request definition that you will use to handle SoD approvals.

4. Choose a Default SoD Approval Type of Serial or Quorum.

   Field	Description
   Serial	Select Serial if you want the role to be approved by all of the users in the Approvers list. The approvers are processed sequentially in the order they appear in the list.
   Quorum	Select Quorum if you want the role to be approved by a percentage of the users in the Approvers list. The approval is complete when the percentage of users specified is reached. For example, if you want one of four users in the list to approve the condition, you would specify Quorum and a percentage of 25. Alternatively, you can specify 100% if all four approvers must approve in parallel. The value must be an integer between 1 and 100.

5. Modify the Default SoD Approvers.

   Field

   Description

   Default SoD Approvers

   Select User if the role approval task should be assigned to one or more users. Select Group if the role approval task should be assigned to a group. Only one member of the group needs to approve. Select Role if the role approval task should be assigned to a role. Like groups, only one member of the role needs to approve. To locate a specific user, group, or role, use the Object Selector or History buttons. To change the order of the approvers in the list or to remove an approver, see Section 1.4.4, Common User Actions

6. Click Save to make your settings permanent.