Entitlements

The entitlements or roles assignable to identities defined within a access management system are depending on the internal structure of a organisation.

Organisations tend to structure itself according to the services and products they provide. This gives us lots of possible models and therefore the engine behind personify is based on generating the identity management solutions based on a model.

Important concepts when talking about entitlements is the assignable to and assignable by dimension of the entitlement. This is also dominated by the organisation structure.

To manage the internal identity management system, one can specify make the difference between internal and custom entitlements

Internal entitlements are defined with the purpose to control access to the entitles and workflows of the identity management solution itself : 3 possible entitlements and their definition are given below

Custom entitlements are created to give privileges to people in other targetsystems. These entitlements will be more subject to provisioning, given their nature. Examples of this are : Sharepoint, Git-access, Corporate network access, employee badge, ... .