You have two segregation of duties requirements: 1) a user can access either the supplier creation pages or the invoice pages, but not both. 2) a…

In Oracle Advanced Access Controls, the standard methodology for implementing Segregation of Duties (SoD) involves creating a single, comprehensive access model for each business process. This model groups all related entitlements that need to be analyzed for conflicts. For the procure-to-pay process described, the entitlements "Create Supplier," "Create Invoice," and "Create Payment" should be consolidated into one model. This model then serves as the foundation upon which specific access controls (the rules defining the conflicts) are built. This approach ensures an efficient and holistic analysis of access risks within the business process.

A. This option describes how individual entitlements are defined using filters, not the overarching structure of models and controls needed to meet the SoD requirements.

B. Creating multiple models for a single business process is inefficient and contrary to best practices. A single model should contain all related entitlements for streamlined analysis.

C. The requirements explicitly state two SoD conflicts, not three. This option incorrectly assumes a third conflict ("Create Supplier & Create Payment") is required.

E. An entitlement represents a single, granular privilege. It is fundamentally incorrect to combine three distinct functions into one entitlement.

1. Oracle Fusion Cloud Financials, Implementing Risk Management and Compliance, Release 24B, Chapter: Advanced Access Controls, Section: Access Models.

Reference: "An access model is a set of entitlements selected for analysis of access risk. Typically, the entitlements in a model are related to a specific business process. For example, a Procure to Pay model might include entitlements that authorize a user to create suppliers, enter invoices, and make payments." This supports creating a single model for the related functions.

2. Oracle Fusion Cloud Financials, Implementing Risk Management and Compliance, Release 24B, Chapter: Advanced Access Controls, Section: Access Controls.

Reference: "A control identifies entitlements whose pairing in a single user's access privileges may constitute a risk. Each control is associated with a model, and is defined by entitlements selected from that model." This confirms that specific conflict rules (controls) are built upon the foundation of a single, comprehensive model.