Identify The Best Practices

摘要

Deepak Taneja, founder, president and CTO of Aveksa, says there are three key objectives to keep in mind for any identity management initiative: The people who manage roles should understand them. Role definitions should describe, in business terms readily intelligible to any IT security, audit/compliance or business manager within your organization, what a person assigned to that role does. Roles should simplify users' view of access. Everyone that uses the roles-based access governance system should be able to see easily who has access to what and understand whether that access is appropriate (entitlements fit the role or are out-of-role, or create a compliance violation).