# Control 2.8: Access Control and Segregation of Duties - Screenshot Specifications

## Required Screenshots

| Filename | Portal | Navigation Path | What to Capture |
|----------|--------|-----------------|-----------------|
| `01-entra-groups-list.png` | Entra | Groups | Security groups for access control |
| `02-entra-group-members.png` | Entra | Group → Members | Group membership |
| `03-entra-pim-dashboard.png` | Entra | Identity Governance → PIM | PIM dashboard |
| `04-entra-pim-activate.png` | Entra | PIM → Activate | Role activation process |
| `05-entra-access-reviews.png` | Entra | Identity Governance → Access reviews | Access review list |
| `06-entra-review-decisions.png` | Entra | Access review → Decisions | Review decision interface |
| `07-ppac-security-roles.png` | PPAC | Environment → Security roles | Role assignments |
| `08-ppac-sod-validation.png` | PPAC | Users → Permissions | SoD conflict check |

## Notes for Verification

- SoD conflicts are identified and documented
- PIM is used for privileged access
- Access reviews are scheduled and completed
- Security roles enforce separation

---

[Back to Control 2.8](../../controls/pillar-2-management/2.8-access-control-and-segregation-of-duties.md)
