# Enhancement: Custom User Levels now include SOD Permissions

**URL:** <https://developer.sailpoint.com/discuss/t/enhancement-custom-user-levels-now-include-sod-permissions/218575>\
**Category:** Product News\
**Tags:** separation-of-duties, identity-security-cloud, new-enhancement, custom-user-levels\
**Created:** [August 10, 2026, 4:03pm UTC](https://developer.sailpoint.com/discuss/t/enhancement-custom-user-levels-now-include-sod-permissions/218575 "2026-08-10T16:03:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Colin](https://avatars.discourse-cdn.com/v4/letter/c/e19b73/32.png) [@Colin](https://developer.sailpoint.com/discuss/u/Colin)\
**Post date:** [August 10, 2026, 4:03pm UTC](https://developer.sailpoint.com/discuss/t/enhancement-custom-user-levels-now-include-sod-permissions/218575/1 "2026-08-10T16:03:16Z")

</div>

## **Description**

### **Background**

Identity Security Cloud (ISC) shipped SOD violation management June 29, 2026.

### **Current Situation**

The new feature enabled IAM teams to assign compliance teams to 4 new user levels removing the need to make compliance teams IAM org admins.

 ![cdn](https://global.discourse-cdn.com/sailpoint/original/3X/e/6/e67b251a8556e2c1eb5ca75c39aa19389ef5562d.png)

## **Problem**

Customers need flexibility to assign SOD compliance permissions based on their needs.

## **Solution**

Enable customers to utilize ISC custom user levels with the permissions from the in the box SOD user levels.

 ![SoD_CUL](https://global.discourse-cdn.com/sailpoint/original/3X/d/b/dbc2c6b267865864963c6b0a94b1b5f42d531e00.png)

## **Who is affected?**

SailPoint Identity Security customers who own Separation of Duties feature (suites) will have customer user levels for SoD available August 7.

---

<div class="post-metadata">

**Author:** ![angelo\_mekenkamp](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/angelo_mekenkamp/32/3386_2.png) [@angelo\_mekenkamp](https://developer.sailpoint.com/discuss/u/angelo_mekenkamp)\
**Post date:** [August 25, 2026, 6:11am UTC](https://developer.sailpoint.com/discuss/t/enhancement-custom-user-levels-now-include-sod-permissions/218575/2 "2026-08-25T06:11:30Z")

</div>

Hey @Colin,

Is there an ETA when ALL other access rights can be assigned separately by customers to support least privilege.

In addition, identities with ORG\_ADMIN capabilities can read and write objects, even for newly introduced object types.  
Can you create a ORG\_READ\_ADMIN user level that, when we assign it to someone; they will automatically be able to read all objects that org\_admins could read as well, including future object types (and only write them if allowed in other ways). So we shouldn’t have to update our stuff each time a new object type is introduced. (This last request is the most popular request as you can see in the idea portal)