Oracle Fusion 25D · Risk & Compliance · Segregation of Duties

Oracle Segregation of Duties 25D Release Intelligence

5 feature changes for Oracle Segregation of Duties in 25D (October 2025) — covering process logic, accounting rules, integration payloads, security policies and reporting outputs. 2 High/Critical items require prioritised regression validation; 2 Medium items should be sampled.

2 High/Critical
0 Med-High
2 Medium
1 Low
8 pages
6 APIs
25D Segregation of Duties Command Center
LIVE · OCT 2025
Total Features
5
High Severity
2
Affected Pages
8
Affected APIs
6
High/Critical2
Med-High0
Medium2
Low1
RELEASE OVERVIEW

What Changed in Oracle Segregation of Duties 25D

Oracle Fusion 25D (October 2025) delivered 5 feature changes for Oracle Segregation of Duties — covering process logic, accounting rules, integration payloads, security policies and reporting outputs. 2 are marked High or Critical severity and require prioritised regression validation before production cutover. Below: every individual change with affected components, recommended test cases and business impact.

5
Total Changes
2
High / Critical
8
Pages Affected
6
APIs Affected
FEATURE-BY-FEATURE BREAKDOWN

All 5 Segregation of Duties 25D Changes

Each card shows the change type, severity, affected pages and APIs, recommended test cases and business impact rationale.

AI-assisted SoD Conflict Detection

High
Type: Process / Data Opt-in: Opt-in

Enhanced AI-driven detection of conflicting duties across roles using risk pattern matching and historical audit data

Affected pages
Security REST API, Role Assignments API
Affected APIs
Run Role Inheritance Analysis, Run Security Policy Analysis
ESS jobs
Security Console Config, Risk Rules Engine, Role Designer
Configuration
User Access Management, Role Provisioning
Business processes
Create conflicting role assignments, validate auto-flagging, simulate access violation scenarios
Data objects
Role Assignment Matrix, Security Risk Rules, User Role Mapping (Security Console, Manage Data Access, Role Administration)
RECOMMENDED TEST CASES

Improves proactive identification of toxic role combinations and reduces audit failures

Real-time SoD Risk Scoring Dashboard

Medium
Type: UI / Process Opt-in: Opt-in

Introduces real-time risk scoring visualization for user-role combinations with drill-down analysis

Affected pages
Risk Scoring API, Security Insights API
Affected APIs
Refresh Risk Scores Job
ESS jobs
Security Dashboard Config, Risk Threshold Rules
Configuration
Compliance Monitoring, Internal Audit Review
Business processes
Validate dashboard refresh, verify score recalculation on role change
Data objects
Risk Score Ledger, User Access Evaluation Store (Security Dashboard, Risk Analysis Workbench)
RECOMMENDED TEST CASES

Enables continuous compliance monitoring instead of periodic audits

Automated Mitigation Workflow for Violations

High
Type: Process Opt-in: Opt-in

Workflow automation for resolving SoD violations via approvals, role redesign, or temporary access grants

Affected pages
Workflow Notification API, BPM Approval API
Affected APIs
Process Security Violation Workflow Job
ESS jobs
Approval Rules, Workflow Configuration
Configuration
Access Remediation, Security Governance
Business processes
Trigger violation, validate workflow routing, test approval rejection/override
Data objects
SoD Violation Queue, Mitigation Action Log (Manage Security Violations, Workflow Console)
RECOMMENDED TEST CASES

Reduces manual intervention in compliance remediation

Enhanced Role Mining for Legacy Access Cleanup

Medium
Type: Data / Process Opt-in: Opt-in

AI-driven role mining identifies unused or excessive privileges and suggests optimized role structures

Affected pages
Role Analytics API
Affected APIs
Run Role Usage Analytics Job
ESS jobs
Role Templates, Security Profiles
Configuration
Identity Governance, Role Optimization
Business processes
Identify dormant roles, validate suggested cleanup recommendations
Data objects
Role Usage Analytics, Privilege Mapping Table (Role Designer, Security Console)
RECOMMENDED TEST CASES

Helps reduce privilege creep and improves security hygiene

Expanded Audit Trail for SoD Changes

Low
Type: Data / Compliance

Extended audit logging for role, privilege, and SoD rule changes with timestamped lineage tracking

Affected pages
Audit REST API
Affected APIs
Extract Security Audit Data Job
ESS jobs
Audit Policy Configuration
Configuration
Compliance Reporting, External Audit Support
Business processes
Validate audit trace completeness for role updates
Data objects
Security Audit Ledger, Role Change History (Audit Reports, Security Console)
RECOMMENDED TEST CASES

Strengthens regulatory compliance and forensic traceability

AFFECTED COMPONENTS · DEDUPED

Components Touched by Segregation of Duties 25D

Unique pages, APIs, ESS jobs, configurations and business processes across all 5 25D changes.

Affected Pages

8
Audit REST API BPM Approval API Risk Scoring API Role Analytics API Role Assignments API Security Insights API Security REST API Workflow Notification API

Affected APIs

6
Extract Security Audit Data Job Process Security Violation Workflow Job Refresh Risk Scores Job Run Role Inheritance Analysis Run Role Usage Analytics Job Run Security Policy Analysis

ESS Jobs

10
Approval Rules Audit Policy Configuration Risk Rules Engine Risk Threshold Rules Role Designer Role Templates Security Console Config Security Dashboard Config Security Profiles Workflow Configuration

Configuration Objects

10
Access Remediation Compliance Monitoring Compliance Reporting External Audit Support Identity Governance Internal Audit Review Role Optimization Role Provisioning Security Governance User Access Management

Business Processes

11
Create conflicting role assignments Identify dormant roles Trigger violation Validate audit trace completeness for role updates Validate dashboard refresh simulate access violation scenarios test approval rejection/override validate auto-flagging validate suggested cleanup recommendations validate workflow routing verify score recalculation on role change

Data Objects

11
Mitigation Action Log Privilege Mapping Table Risk Score Ledger Role Assignment Matrix Role Change History Role Usage Analytics Security Audit Ledger Security Risk Rules SoD Violation Queue User Access Evaluation Store User Role Mapping

Oracle Segregation of Duties 25D FAQ

What changed in Oracle Segregation of Duties 25D?

Oracle Fusion Segregation of Duties 25D delivered 5 feature changes — 2 High/Critical severity, 0 Med-High, 2 Medium, 1 Low. Changes spanned UI updates, AI/automation enhancements, integration improvements and compliance updates. See the full breakdown above.

How many High-severity items are in Segregation of Duties 25D?

2 items in Oracle Fusion Segregation of Duties 25D are classified as High or Critical severity. These require dedicated regression testing before production rollout.

What pages and APIs are affected?

Affected components include 8 unique pages, 6 APIs, 10 ESS jobs, and 10 configuration objects across the 5 feature changes. See "Affected Components" section above.

Should I still test Segregation of Duties after 25D went live?

Yes. Most customers complete a 25D regression cycle, but Segregation of Duties forms part of the regression baseline for 26A/26B impact analysis. Customers who deferred 25D patches should also still run targeted regression before 26A go-live.

How does SyntraFlow automate Segregation of Duties 25D regression?

SyntraFlow Release Intelligence maps each 25D Segregation of Duties feature against your live tenant configuration, identifies the ones that actually apply, and auto-composes a regression test pack covering only the relevant pages, APIs and business processes.

Validate Oracle Segregation of Duties 25D Against Your Tenant

SyntraFlow Release Intelligence maps every 25D advisory against your live Segregation of Duties configuration and auto-composes a regression test pack with SOX / GDPR audit evidence. Used by US, UK and EU enterprise Oracle teams.