Role Creation

Overview

Simplify Business Role Creation with a Powerful, Flexible Approach
Compliance IQ drastically reduces the time it takes to define roles by automating the process of grouping fine-grained entitlements into logical business roles.

Leveraging a variety of tools for defining or modifying business roles, Compliance IQ makes it easier to capture the business context required to manage identity compliance and simplify user administration. Business role modeling takes a top-down view of role creation while role mining takes a bottom-up approach. Compliance IQ also provides the capability to create candidate roles during the access certification process, making it easier for both business and IT to define roles. Once defined, the candidate roles must be reviewed and approved before being placed into production.

Business Modeler [ view larger screenshot ]

Candidate Role Creation [ view larger screenshot ]

Capabilities

• Define Business Roles – Enables business and IT managers to model various organizational structures in a hierarchical business role model. This flexible approach enables organizations to define a top-down view of the roles that support critical business processes.
• Perform Role Mining – Allows organizations to efficiently create candidate roles by searching and analyzing identity data using defined parameters such as department, cost center, or manager. Role mining identifies and profiles the distribution of entitlements within each search parameter, simplifying the task of discovering which entitlements are most prevalent in a user group.
• Create Roles during Certifications – To make it as easy as possible for business and IT managers to provide guidance and input on role definition, Compliance IQ allows reviewers performing access certifications to capture and define candidate roles during the access certification process.

Features

• Business Role Modeler – Defines a hierarchical view of the roles that support critical business processes
• Role Mining – Mines and graphically displays groups of users with similar entitlements and identity attributes
• Certification-based Role Definition – Allows reviewers to define candidate roles during the access certification process

Resources

• Compliance IQ Product Brochure – A quick introduction to SailPoint Compliance IQ, an integrated solution that automates identity compliance controls, manages roles and analyzes identity risk.
• Role Management Data Sheet – Outlines the key components and benefits of Compliance IQ's role management offering including role creation, lifecycle management, role assignment and role-based governance.
• Viewpoints: Role Management and Risk – This educational paper reviews how effective role management can provide the business context necessary for non-technical personnel to oversee and verify user access policy. It reviews three ways that role management helps organizations to manage information security risk and ultimately corporate risk.
• Best Practices: Practical Role Management – This paper identifies common pitfalls on the road to role management and which best practices can pave the way to solving real business problems.
• Role of Roles in Compliance Podcast – Jackie Gilbert, VP of Marketing and Founder, interviews Darran Rolls, CTO for SailPoint, on the subject of role-based access control (RBAC), and its relevance to identity management and compliance projects. Darran tackles the controversial topic concerning the difference in roles for provisioning and roles for compliance and where they can, ultimately, come together.

Demo