This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Dynamic Separation of Duty
Dynamic Separation of Duty

Version management

Difference between version and

At line 1 added 8 lines
Dynamic Separation of Duty (DSoD) differs from [Static Separation of Duty] (SSoD) based on the when the enforcement of the [Separation of Duty] constraint is performed.
[Static Separation of Duty] (SSoD) is typically determined when the roles are assigned to the users. Dynamic Separation of Duty (DSoD) is dynamically evaluated within the active session.
!!DSoD relations
DSoD relations place constraints on the roles that can be activated in a user’s session. If one role that takes part in a DSD relation is activated, the user cannot activate the related (conflicting) role in the same session
The Dynamic Separation of Duty concept becomes especially important when utilizing [RBAC Hierarchical] where a senior role may contain conflicting [Separation of Duty] constraints.
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop