1Z0-1058-26 practice question 6 of 10

You have two segregation of duties requirements: 1) a user can access either the supplier creation pages or the invoice pages, but not both. 2) a user can access either the invoice creation pages or the payment creation pages, but not both. How must these requirements be met in Advanced Access Controls?

Answer options

A: Construct one model with three condition filters where the Function Name Equals “Create Supplier”, “Create Invoice” and “Create Payment”

B: Construct two models, and create controls based on the models: “Create Supplier & Create Invoice”, “Create Invoice & Create Payment”

C: Construct three controls, and create controls based on the models: “Create Supplier & Create Invoice”, “Create Invoice & Create Payment”, “Create Supplier & Create Payment”

D: Construct one model: “Create Supplier & Create Invoice & Create Payment” Correct answer

E: Construct one entitlement: “Create Supplier & Create Invoice & Create Payment”

Correct Answer:

D. Construct one model: “Create Supplier & Create Invoice & Create Payment”

Explanation

In Oracle Advanced Access Controls, the standard methodology for implementing Segregation of Duties (SoD) involves creating a single, comprehensive access model for each business process. This model groups all related entitlements that need to be analyzed for conflicts. For the procure-to-pay process described, the entitlements "Create Supplier," "Create Invoice," and "Create Payment" should be consolidated into one model. This model then serves as the foundation upon which specific access controls (the rules defining the conflicts) are built. This approach ensures an efficient and holistic analysis of access risks within the business process.

Why Incorrect

A. This option describes how individual entitlements are defined using filters, not the overarching structure of models and controls needed to meet the SoD requirements.
B. Creating multiple models for a single business process is inefficient and contrary to best practices. A single model should contain all related entitlements for streamlined analysis.
C. The requirements explicitly state two SoD conflicts, not three. This option incorrectly assumes a third conflict ("Create Supplier & Create Payment") is required.
E. An entitlement represents a single, granular privilege. It is fundamentally incorrect to combine three distinct functions into one entitlement.

References

1. Oracle Fusion Cloud Financials, Implementing Risk Management and Compliance, Release 24B, Chapter: Advanced Access Controls, Section: Access Models.

Reference: "An access model is a set of entitlements selected for analysis of access risk. Typically, the entitlements in a model are related to a specific business process. For example, a Procure to Pay model might include entitlements that authorize a user to create suppliers, enter invoices, and make payments." This supports creating a single model for the related functions.

2. Oracle Fusion Cloud Financials, Implementing Risk Management and Compliance, Release 24B, Chapter: Advanced Access Controls, Section: Access Controls.

Reference: "A control identifies entitlements whose pairing in a single user's access privileges may constitute a risk. Each control is associated with a model, and is defined by entitlements selected from that model." This confirms that specific conflict rules (controls) are built upon the foundation of a single, comprehensive model.

Keep practicing

Take the free 1Z0-1058-26 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test