Identity and Access Management
Identity and access management sets up a small set of roles, one place to grant and withdraw them, and a current list of who holds what. It replaces logins created one request at a time.
Joiner, mover, leaver
Three events decide whether an access list stays accurate. Each one is handled with its own step.
What gets put in place
- Single sign-on across the platforms that support it, so one withdrawal closes several logins
- Roles written from job descriptions, with admin rights held by named people
- Multi-factor on administrator and finance logins first
- Shared logins split into named ones, so a record shows a person rather than a department
- A quarterly list of every account, sent to the manager who should recognise the names
Where it stays manual
Not every system can be brought under one sign-in. Older desktop software often has a single administrator login and no roles. A licence counted per machine resists being split. A vendor may still need access to support a system they wrote. Each case is handled separately and recorded in writing.
Frequently asked questions
Can every system we run sit behind one login?
No. Cloud platforms, email and most modern business software can join single sign-on. Older desktop applications, some accounting installations and a few vendor portals cannot, so they stay on a named list that is reviewed by hand.
Everyone uses one shared admin password. Where do we start?
Start by giving each person a named login with the rights the job needs. Then change the shared password and keep it in a password manager for emergencies. Until then, no log can show who did what.
Is an access audit the same as identity and access management?
No. An audit reports what exists on the day it is run. The setup described here keeps the list accurate afterwards. Many businesses start with the audit, since it shows how far accounts have spread.
Tell us what you need.
Share your requirements and one of our engineers will come back to you within one business day.
- No obligation
- A reply within one business day
- Your details stay private
Start with your requirements
Seven short steps that tell us what you need. An engineer reads them before getting in touch.
Share your requirements