A software project manager has been provided with a requirement from the customer to place limits on the types of transactions a given user can initiate without external interaction from another…

An administrative control refers to policies, procedures, and guidelines rather than a technical enforcement mechanism that limits transaction types per user role.

Dual control requires two authorized users to act simultaneously and together, such as two keys to open a safe, rather than a tiered privilege approval workflow involving different roles.

Separation of duties is a security principle that divides sensitive tasks so that no single user can complete them unilaterally. Requiring external interaction from another user with elevated privileges before a transaction can proceed enforces this separation by introducing a mandatory approval boundary. This limits insider threat and reduces the risk of unauthorized or fraudulent actions by any individual user acting alone.

Least privilege restricts a user to the minimum access needed for their role but does not inherently require a second user's involvement to authorize or complete a transaction.

Collusion describes two or more users cooperating to circumvent controls and is a threat model, not a security control or implementation approach.