<!-- Canonical: https://easyiga.com/product/sod-controls -->

[Home](https://easyiga.com/) / [Product](https://easyiga.com/product) / Separation of duties

# See the conflict before you approve.

See an incompatible role before approving more access. easyIGA displays the result of midPoint’s configured separation-of-duties checks on the approval card.

[Request a walkthrough](https://easyiga.com/contact#form)

## The check uses your configured policy

A separation-of-duties rule identifies access combinations that should not be held together. For example, your finance process may separate maintaining supplier details from approving supplier payments. The process owner must decide which combinations matter and how exceptions are handled.

Configure those exclusions in midPoint. easyIGA presents the returned policy result during approval so the person deciding can take the conflict into account. The check is only as complete as the policies and access data behind it.

## Current checks and planned rule tools

Shipped: policy conflicts evaluated and shown at decision time. Planned: rule authoring and simulation in easyIGA.

Today, specialists configure the exclusions in midPoint and approvers see the returned result in easyIGA. Creating rules and simulating their effect directly in easyIGA remain planned capabilities.

## Recognise a conflict in a familiar task

For example, a colleague already has permission to maintain supplier details and requests permission to approve payments. If your configured policy excludes that combination, easyIGA shows the conflict while the manager considers the request.

Your process owners define which combinations are incompatible and how exceptions are handled. Checks cover the rules and access data you have configured, so those rules need to follow changes in business responsibilities.

After approval, inspect the [target-system outcome](https://easyiga.com/product#requests). Approval alone does not prove that the requested change was applied.

## Bring your own access question

See how easyIGA simplifies everyday access management for your organisation in a 30-minute live walkthrough. Our team will discuss your systems and the tasks you want to improve.

[See easyIGA with our team](https://easyiga.com/contact#form)
