To define mutual exclusivity between two roles, use:
alter role role1 { add | drop } exclusive { membership | activation } role2
For example, to define intern_role and specialist_role as mutually exclusive at the membership level, enter:
alter role intern_role add exclusive membership specialist_role
The example above restricts users who have membership in intern_role from also being members of specialist_role.
To define the sso_role and sa_role as mutually exclusive at the activation level, enter the following command, which prohibits a user who is a member of sso_role and sa_role from assuming both roles simultaneously:
alter role sso_role add exclusive activation sa_role
