Separation of duties (SoD) is the principle that no single identity should control enough conflicting steps or privileges to misuse a process without detection. A common example separates creating a supplier from approving payment to that supplier.
Static SoD prevents conflicting access assignments; dynamic SoD prevents conflicting actions within a transaction or session. IGA can detect or block violations during requests, provisioning and reviews.