Role Allocation

Overview

Effectively Enforce Policy via Provisioning Integration
By leveraging the integration between Compliance IQ and provisioning solutions, organizations benefit from improved consistency of granting user entitlements to critical IT resources and streamline their overall compliance and identity governance efforts. This approach enables organizations to build compliance into the provisioning process by applying centralized business policy to new user role assignments and changes.

Capabilities

• Seamlessly Integrate Role Management with Provisioning – Compliance IQ translates business roles into detailed entitlement level changes and communicates them to provisioning systems, help desk solutions, and other change management systems.
• Ensure Compliant Provisioning – Before a provisioning request is carried out, Compliance IQ performs separation-of-duty (SoD) policy checks to prevent the introduction of violations into the production environment. Policy checks for new user role assignments and changes reduce the possibility of SoD violations – building compliance into the provisioning process.
• Audit Changes for Better Control – For closed-loop audit control, Compliance IQ verifies that any role or entitlement changes sent to provisioning are implemented within an appropriate time frame.

Features

• Provisioning Integration – Integrates seamlessly with user provisioning systems for role assignment using open industry-standards
• SoD Policy Checking – Proactively checks SoD policies before making user role assignments to ensure compliant provisioning
• Closed Loop Auditing – Ensures accuracy of role assignments by validating changes made by provisioning systems

Resources

• Compliance IQ Product Brochure – A quick introduction to SailPoint Compliance IQ, an integrated solution that automates identity compliance controls, manages roles and analyzes identity risk.
• Role Management Data Sheet – Outlines the key components and benefits of Compliance IQ's role management offering including role creation, lifecycle management, role assignment and role-based governance.
• Viewpoints: Role Management and Risk – This educational paper reviews how effective role management can provide the business context necessary for non-technical personnel to oversee and verify user access policy. It reviews three ways that role management helps organizations to manage information security risk and ultimately corporate risk.
• Best Practices: Practical Role Management – This paper identifies common pitfalls on the road to role management and which best practices can pave the way to solving real business problems.
• Role of Roles in Compliance Podcast – Jackie Gilbert, VP of Marketing and Founder, interviews Darran Rolls, CTO for SailPoint, on the subject of role-based access control (RBAC), and its relevance to identity management and compliance projects. Darran tackles the controversial topic concerning the difference in roles for provisioning and roles for compliance and where they can, ultimately, come together.

Demo