|
Identity management delivers value in a number of ways, from making users immediately productive through automated provisioning to reducing help desk costs by enabling users to resolve their own password reset or access requests. Many organizations are supporting user bases so large that managing each user’s privileges on an individual basis is an unrealistic, if not impossible, task. By employing a role-based access model, organizations can maintain secure control of access rights without unwieldy administrative requirements. The challenge is in establishing the initial role model that accurately represents the organization— and then maintaining this model’s relevance over time.
Role Management solutions provide value at multiple levels. First, they aid in the process of discovering the existing roles throughout the organization’s systems. Once this disparate user and role data is aggregated, it can be organized into a role model that fits the organization, whether this is based on organizational structure, user function or other criteria. Having an established role model with assigned users allows this information to be fed into the identity management system to deliver value to the end user. At this point, a continuous feedback process needs to occur — just as roles were analyzed and defined in the first place, they need to be constantly evaluated and modified as the business changes.
Eurekify Enterprise Role Manager is a leading solution for comprehensive and cohesive role management. Founded on advanced pattern recognition technology, it allows organizations to quickly and accurately develop, maintain and analyze role models.
Key Capabilities
ROLE ENGINEERING In a typical organization, an average of 30% of assigned privileges are incorrect, presenting a significant security risk. Organizations need to examine existing system entitlements, then clean-up excessive or unnecessary privileges. With this reliable information, analysis can then be performed to build a role model that appropriately represents the needs of users supported by the organization.
- Top-down and bottom-up role analysis, powered by pattern recognition technology
- Role mining to automate the discovery of role-based and rule-based access patterns
- Wizard-based interface for role creation and collaborative web-based environment for review, approval and change requests
ONGOING ROLE MANAGEMENT Just as individuals may evolve from one role to another, the role model itself needs to adapt due to changes in the business. A centralized role management capability ensures role changes are properly designed, managed and executed after following the appropriate approval processes.
- Automated detection of business changes that require changes to the role model
- Business processes for role approval, self-service requests and role adaptation
- Executive reporting and audit trail
AUDIT AND ANALYSIS An initial step in the role mining process is analyzing the user identities, assigned privileges and role structures currently in place. Eurekify Enterprise Role Manager enables easier account clean-up and role planning through intelligent analysis while implementing policies and audit capabilities to ensure these roles are assigned properly on a continual basis.
- Assessment and audit of systems for exceptions, cleanup and repair
- Detection of policy violations
- Processes for review, approval and change requests for roles and privileges
DATA MANAGEMENT Eurekify Enterprise Role Manager aggregates data from various sources to provide a consolidated environment for analysis and development of role structure. Once the role model is developed, this information can be leveraged by CA Identity Manager for use in access provisioning processes.
- Integration with CA Identity Manager
- Integrity verification and analysis of privilege and Human Resources data
- Data import/export to third-party systems
Eurekify Enterprise Role Manager and CA Identity Manager
In a joint solution, the role model created and maintained by Eurekify Enterprise Role Manager is fed into CA Identity Manager for use in various functions. Eurekify Enterprise Role Manager supplies the underlying role model and enables reporting and analytics to constantly refine the role model. These roles are leveraged by CA Identity Manager in functions such as identity administration, approval workflows, provisioning and user self-service.
|
