Glossary
Segregation of duties
Policies that stop the same principal both creating and approving sensitive changes such as payments.
Segregation of duties (SoD) means the same principal — or two agents with the same owner, where configured — cannot both create and approve a payment, a vendor, a payroll change, a credit note or a user grant. One3 enforces SoD as policy at the Action Bus, and it applies across human–agent pairs where the human owns the agent.
Related controls include just-in-time elevation — a temporary scope for one object, requested through the Approvals Inbox and expiring after use — and the impersonation ban: an agent can't send as a person's mailbox or name unless explicitly delegated and marked AI-assisted.
See how One3 would run your business
Tell us about your team and the outcomes you want. We will walk you through the apps, the Digital Employees and the plan for your industry.