shyaB.g00002MG80e (Partner) asked a question.
What is the functional elements that can be utilized after running collections that can help maintain a least privileged model for users?
Related Questions
Nothing found
Loading
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device How to replace the RSA Authentication Manager self signed console certificate with a signed certificate from Microsoft Act… RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide How to Request Access to the RSA Authentication Manager AMI for AWS via RSA Support
Don't see what you're looking for?
After completing the collection, Access Reviews can begin to run to verify that the access is valid and appropriate.
Access review should help you to review users’ access to resources and determine whether access should be maintained or revoked
Other "functional elements" of IG&L designed to help achieve the "least privilege model" are Rules.
Different types of Rules should be used to detect situations where access should be revoked.
This can be as soon as a new data collection is completed.
In fact, I would argue that Rules should be your primary tool to minimize excessive permissions.
Periodic (eg Yearly) Access Reviews are then be used as a "compensating control", to detect excessive permissions that were not handled in time by Rules.