The Business Role Management component of SAP Access Control allows an enterprise to control access to sensitive transaction codes and address segregation of duties (SoD) within roles before they are created/generated and assigned to users.