Static separation of duties blocks conflicting access assignments, while dynamic separation of duties blocks conflicting actions in a transaction or session.

Static SoD might prevent one person from holding both supplier-creation and payment-approval roles. Dynamic SoD may allow eligibility for both roles but prevent the same person from creating and approving the same payment. IGA commonly evaluates static conflicts during requests and reviews, while applications or policy engines enforce dynamic conflicts at runtime.