Identity Governance, IT Atlas

Overview

Governance answers who should have access, who approved it, and whether it is still needed. It is driven by authoritative HR data, entitlement catalogues, approval workflow and recurring certification.

Without governance, technical identity controls decay: privilege accumulates as people change roles, and leavers retain access through unlinked local or SaaS accounts.

Security considerations

Automate deprovisioning from the authoritative source; manual leaver processes fail silently.
Review privileged and externally shared access more frequently than standard access.

Related topics

RBAC & ABAC

Authorization models that grant permissions through roles, or through evaluated attributes and conditions.

Privileged Access Management

Controlling, brokering, recording and time limiting administrative access to the systems that can change everything else.

Microsoft Entra ID

Microsoft's cloud identity and access management service, the identity control plane for Microsoft 365, Azure and thousands of federated applications.

IT Governance

Establishing direction, decision rights, accountability and oversight so technology serves organisational objectives.

Compliance

Demonstrating that controls required by law, regulation, contract or standard are designed and operating effectively.

Identity Fundamentals

Authentication proves who you are; authorization decides what you may do; identity management maintains both over time.

Single Sign On

One authentication event, evaluated by a central identity provider, granting access to many applications through issued tokens or assertions.

Federation & External Identity

Trusting another organisation's identity provider so its users can access your resources without local accounts.

Access Governance

Ensuring that access rights are justified, approved, reviewed and removed across every system.

Identity Architecture

The design of directories, identity providers, authentication flows, privilege tiers and lifecycle processes that govern all access.