Dynamic separation of duties (DSD) prevents conflicting actions within a transaction, session or defined period, even if a person is eligible for both roles. For example, a user may prepare or approve a payment but cannot perform both steps on the same payment.
DSD differs from static SoD, which prevents the conflicting access rights from being assigned together at all.