To define mutual exclusivity between two roles, use:
alter role role1 { add | drop } exclusive { membership | activation } role2
For example, to define intern_role and specialist_role as mutually exclusive at the membership level, enter:
alter role intern_role add exclusive membership specialist_role
To define sso_role and sa_role as mutually exclusive at the activation level, enter:
alter role sso_role add exclusive activation sa_role