Identity and Access Management (IAM)
- •
def
- •
the overall framework for giving the right permissions to the right people (and non-human entities) at the right time, across applications and data that can be located anywhere
- •
- •
core pieces
- •
identity lifecycle management — every entity gets a digital identity
- •
access control — an entity only gets access to what they need
- •
authentication and authorization — entities must prove who they are before getting access
- •
identity governance — tracking an entity's resource access, sometimes a regulatory requirement
- •
provisioning/de-provisioning — creating and removing accounts, tied to events like hiring, transfers, promotions, and separation
- •
- •