Can I start with SOD VM, and add Application Auditor functionality or extensions later?
Yes, you can upgrade. When you add AA, you can detect changes that would create user SOD access violations in real time. You would also get AA’s additional transaction audit capabilities.