1. A computer-implemented method of verifying separation-of-duties for requested access rights to physical computing resources comprising: providing a database that implements an identity and access management (IAM) data model, the IAM data model defining a first relationship between a user entity and a business task entity and defining a second relationship between the business task entity and a logical permission entity; storing, at the database, (a) a set of user records, each user record conforming to the user entity, (b) a set of business task records, each business task record conforming to the business task entity, and (c) a set of logical permission records, each logical permission record conforming to the logical permission entity; receiving a request to provision one or more access rights for a user specified in the request; identifying a business task to provision one or more access rights for based on content included in the request; querying the database for a first logical permission record that is associated with a first business task record that is associated with a user record corresponding to the user specified in the request, the first business task record corresponding to a current business task associated with the user specified in the request; querying the database for a second logical permission record that is associated with a second business task record corresponding to the business task identified from the content included in the request; determining whether the current business task associated with the user is incompatible with the business task identified from the content included in the request by determining whether a first logical permission corresponding to the first logical permission record is incompatible with a second logical permission corresponding to the second logical permission record; and based on whether the current business task associated with the user is incompatible with the business task identified from the content included in the request, either providing an indication that the request would result in a separation-of-duties violation or fulfilling the request.