Functions and Risks 
A function is a grouping of one or more actions. An access risk is an object that associates two or more conflicting functions or a critical action and critical permission. Critical actions and critical permissions are also referred to as attributes. The attributes impact how the access risk translates into an access rule.
When you define an access risk, you specify a combination of functions that represent an access risk to an employee.
Note
The definition of a risk includes other attributes that impact how the risk translates into rules. The condition that determines the presence of a risk is one or more functions that when combined, create a conflict.
Actions assigned to a function represent the tasks an employee must be able to perform for a specific purpose.
However, combined functions can conflict.
Example
An employee who has access to inventory records should not have the authority to sign for deliveries. When these two functions are combined, they pose a SoD risk.