How challenging was the role model? Was an analysis of the conflict roles matrix performed? At which level was it worked through — physical or logical?

The role model in the project was quite complex, as the system required access restrictions at multiple levels. An analysis of the conflict matrix of roles (SoD — Segregation of Duties) was conducted to prevent situations where one role has incompatible permissions, which could lead to security risks.

The analysis was performed at the logical level: we determined which operations or access rights should not be combined within a single role. For example, a role that can create users should not have the rights to delete them without additional control.

Ultimately, the conflict matrix of roles helped identify and eliminate potential overlaps, as well as form a set of roles with clearly defined permissions, which increased the system's security and manageability.