SoD Matrix
Visualize the user × role intersection as a matrix with conflict rules overlaid.
- Ledger + user role assignments
- Key analysis in IT controls
What it checks
- Rows: users.
- Columns: roles, conflicting pairs placed adjacent.
- Cells: empty, granted, or executed.
- Conflicts marked where the user holds both cells.
How the result is read
A matrix makes orphan grants, broad access and clustered violations visible in a way a row-by-row table cannot. Whether it is true depends on nested-group resolution: a conflict assembled from two separate group memberships is invisible in a matrix built on directly-assigned roles, and that is the usual way one arises.
In the application
SoD Matrix is filed under IT controls, index letter K. "Run all analyses" runs it with every other analysis the ledger and the documents loaded can answer. The worksheet states the population it tested on its face — or "Not applicable" with the reason when a column it depends on is empty — and the Excel workbook the engagement exports files it under K, beside an index of the source files with their SHA-256 fingerprints.
Also listed in the application as User-Account Chord
.
Read it with
Run your next audit file test without the Excel crash.
One free engagement to evaluate, valid 60 days. The ledger never leaves the machine.
- 20 minutes
- Runs on a fictional engagement
- No client data required