SAN RAMON, CA--(Marketwired - Oct 28, 2013) - Avatier Corp., a leader in risk-driven identity management software, has just released recommendations for companies mining roles to determine appropriate access for their workers. The three key areas for examination are detailed in "Role Mining's Tremendous Value to Identity Management Automation" by Ryan Ward, Avatier's Chief Innovation Officer.
"Regardless of whether you are using sophisticated software or manual role mining approaches, it is important to think logically through the process," said Ward. "Making assumptions about HR, directory and entitlement data can truly derail your efforts."
Avatier's recommendations include:
1. Based on the HR and/or directory data, IT should determine what data points actually constitute a role. In some organizations, this could simply be the "title" field of the identity. However, in many other organizations an additional attribute may need to be applied to define the role.
2. Never assume current entitlement assignments are accurate. When IT starts to look at existing user access entitlements, they should not assume that their current access is actually appropriate access. If workers have been at an organization for years, for example, they may have accumulated excess rights that are no longer needed.
3. Take a step back and focus on solving underlying data problems with HR data. In order to "mine" user and entitlement data, there must be some standards to place around the identity data being mined.
"Ultimately, this is a time consuming task," Ward added. "It's important to consider whether doing this manually is even feasible anymore."
About Avatier
Avatier is the identity management company designed for business users. We automate and unify enterprise operations by standardizing business processes with an IT store. Our IT service catalog creates a single system of record for access requests and IT audit.
Our easily extensible identity management system lowers operational costs and provides corporate governance visibility. Avatier automates workflow and compliance reviews to reduce IT security risks.
Founded in 1997, Avatier is headquartered in the San Francisco Bay area with offices in Chicago, Dallas, New York, Washington DC, London, Munich, Singapore, Dublin, and Sydney. Our products operate globally for customers like Marriott, DHL, ESPN, Halliburton, Starbucks and hundreds more. For more information, please visit www.avatier.com and follow @Avatier on Twitter.