Patent ID: 8555333

Claim:
A computer-implemented method of identifying and resolving a separation of duties (SOD) conflict, the method comprising the steps of: based on predefined rules specifying combinations of permissions causing SOD conflicts, a computing system identifying the SOD conflict for a person granted (a) a first permission to perform a first action provided by a first application, and (b) a second permission to perform a second action provided by a second application, the first application having a different function than the second application; in response to the computing system identifying the SOD conflict and based on predefined correlations in a database between the SOD conflicts and recommended actions, the computing system correlating the SOD conflict with a recommended action to resolve the SOD conflict, the recommended action to delete the first permission for the person or delete the second permission for the person, and initiating display of the recommended action on a display device; and subsequent to the computing system initiating display of the recommended action, the computing system receiving an acceptance of one of the recommended actions from a user, and in response, the computing system deleting the first or second permission for the person according to the accepted recommended action, wherein the database includes another permission that allows the person to perform another action provided by the first application, the second application or another application, and the one recommended action does not include deleting the other permission.