FinServ: How to implement GitLab's separation of duties features
Aug 13, 2024Cherry Han

Summary
This post details how to implement separation of duties (SoD) in GitLab for financial services by leveraging merge request approval policies, protected features (branches, tags, environments, packages), user permissions (roles and custom roles), and compliance frameworks. It emphasizes the importance of SoD for risk mitigation, accountability, and regulatory compliance. Specific configurations like 'prevent approval by author', 'prevent approvals by users who add commits', and 'require user password to approve' are highlighted. The post also discusses the role of audit events and the Compliance Center for monitoring and auditing these implementations.