This is a follow up to the question/answers provided during the March UL Meeting. See the agenda for slides and a video recording of the Identity Governance Tool presentation.
- There are no immediate changes to OARS. Manual access requests for M-Pathways roles are not going away.
- The use of Identity Governance (IG) is not mandatory. IG is a tool that ITS can use to help campus better manage access when there is a good fit and clear benefits.
- Identity Governance is able to automate access management in cases where a policy can be defined to establish a group who should receive access to common university resources.
- New implementations require a collaborative effort between key people in the unit responsible for access management, and a team of analysts and developers from ITS. New implementations can take from 3 days to 6 months depending on how well the current access rules and process are understood and the complexity of applications’ permission for which access is needed.
- Access management is currently manually managed for the majority of university resources. We want to automate access management for more university resources in the future to increase security, reduce the amount of manual effort, and provide access to people faster. This transition will happen gradually over years due to the time and resources needed for new implementations.
More about automating access management using IG business roles and role-based access can be found on the Identity Governance website.
For our early IG adopters, Business Roles are managing access to the following:
- College of Engineering
Automate off-hours building access based on Business Role by integrating with C-Cure, the existing building access system - UM-Dearborn
Automate information for provisioning and deprovisioning access to Banner Financial Aid roles - Shared Service Center Procurement
Automate provisioning and deprovisioning FIN Procurement PeopleSoft access and permissions for 13 working titles
Learn more about the early adopters’ use of IG.
Key Benefits of Identity Governance
- Automated Deprovisioning
- Reduced Number of Approvals
- Understand who has what access and why, risk levels
Contact us: [email protected]