Identities and their accounts

Only those who keep order master chaos

Reliable

Secure accesses and permissions

Accounts and permissions are the central part of an identity management and more important than ever for the security of processes and data in a company.

SavvySuite’s Identity Management helps you to literally tidy up accounts and enable employees to order the appropriate permissions themselves or to assign them automatically – depending on the situation.

Of course, like other services, the question of who is allowed to have what permission is subject to sets of rules that are tightly coupled to a catalog and the employee’s context.

SavvySuite ensures that authorizations are not only reliably assigned, but also monitored and revoked.

The employee – more than just his account

Traditionally, the IT view of an employee is usually focused on his or her account. Directory services such as an Active Directory map the technical/organizational view of the company in a network with logins and memberships in structures and groups. Applications in the enterprise use these objects to identify and authorize employees and other services to a set of actions within the applications. However, the account can never be the sole equivalent of the employee in the

The account, however, can never be the only equivalent of the employee in the enterprise, since a pure directory service can never express the complex use of services and the affiliation of the employee to the enterprise.

  • Employees have an account, ideally only one, but in reality often many different ones. The accounts must be managed; like all IT services, they are subject to a lifecycle.

  • The lifecycle of the account is closely linked to the employee’s company affiliation and changes. Starting with the account name, which can change when triggered by HR.

  • Accounts no longer are only working locally, but also in the cloud. In particular, all parts of the cloud are relevant and must be managed as well.

  • Not only accounts, but also mailboxes interact with HCM/HR processes. Aliases are assigned.

Challenges

  • Mapping properties and objects such as accounts to people is an urgent matter.

  • Each account must be assigned to someone who is responsible for it and who is subject to a lifecycle that the account follows.