Context-dependent transactional management of services within a cloud environment for an organization using business rules includes generating a partitioned graph representing the organization and the business rule, where the business rules include one or more separation of duties requirements. Upon receiving an access request from an end user of the cloud service, a determination is made if the access request to the cloud service violates any of the one or more separation of duties requirements. Based on determining that the access request to the cloud service does not violate any of the one or more separation of duties requirements, transaction with the cloud service is granted to the end user. Based on determining that the access request to the cloud service violates one of the one or more separation of duties requirements, access to the cloud service is denied to the end user.