157. Identity and Access Management

IAM

Identity and Access Management

Identity and Access Management

Systems and processes used to manage access to info in an org to ensure that the right individuals have access to the right resources at the right times for the right reasons

Identification

Process where a user claims an identity to a system, typically using a unique identifier like a username or an email address

Authentication

Process of verifying the identity of a user, device, or system and the credentials provided by the user against a database of authorized users

Authorization

Process that determines what permissions or levels of access the user has

Accounting

Process of tracking and recording user activities

Provisioning

Process of creating new user accounts, assigning them appropriate permissions, and providing users with access to systems

Deprovisioning

Process of removing an individual's access rights when the rights are no longer required

Identity Proofing

Process of verifying the identity of a user before the account is created

Interoperability

The ability of diff systems, devices, and apps to work together and share info

Attestation

Process of validating that user accounts and access rights are correct and up-to-date