All glossary terms
AGlossary

Access Governance

Access control is the combination of policies and mechanisms that permits or denies an identity's requested action on a resource.

Access governance is the oversight of who has access to what, why they have it, whether it remains appropriate and who is accountable for the decision. It combines access policies, ownership, reviews, risk analysis, separation-of-duties controls and audit evidence.

Access governance is the governance-focused part of IGA. Administration adds operational capabilities such as provisioning, de-provisioning and request fulfilment.