Access Governance & RBAC

iWelcome provides a robust set of processes, controls and reports to help you achieve access compliance. Roles can be used to model your user's access and authorizations optimizing the way you manage, control and govern access. 

Role based access control

Role based access control (RBAC) enables privileges to be assigned to arbitrary roles. Those roles can then be assigned to real users.

Typically a set of both business roles and IT roles are created. Individual users are (automatically) assigned one or more business roles. Each business role corresponds to a set of technical roles. The technical roles consist of a set of specific entitlements.

Role based access is an integral part of iWelcome and is a way to simplify both access controls, and the account provisioning, auditing and periodic access review processes.

Reporting

A full set of reports is provided to report on user's access. Using these reports you'll get a good understanding of not just the access provisioned through iWelcome, but also the situation as it exists in the connected systems. This data helps prepare Soll-Ist comparisons and inform you about orphan, rogue or disabled accounts.


Click here for more information on the other types of reporting we provide.

Access Review

With iWelcome you can put processes in place to ensure that user access rights are current and appropriate by periodically requiring business stakeholders to review user profiles, login accounts and security group memberships.


Different stakeholders can be asked to review different users: managers review their direct subordinates, application owners review the users of their applications and security group owners review their memberships. 

Staging

Once up and running you should not disrupt any access for your users. There will be times though, that you want to implement bigger changes to your role or authorization model. For those cases we provide staging capability.

 

You can safely implement the changes and run a simulation of a live deployment to get a thorough understanding of the impact of your change. Once ready, you can then push it to the live environment putting those changes in effect.