Section 19.4. What is access management?

19.4. What is access management?

Access management is the actual definition of roleswhat should a salesperson have access to, or the CEO?down to the level of which systems each role can access, or which processes they can initiate, or which documents they can open. The roles defined here will be used within identity management to permit users what they need to be permitted on the business level (the salesperson) as well as on a more technical level (the administrator). Access management defines the roles and enforces authorizationthat the users have, in fact, the roles they have been assignedand their corresponding permissions. Access management needs a valid identification of the user by the authentication subsystem, and the information concerning which users are assigned to which groups.