Birthright Access is baseline access automatically granted because an identity meets defined criteria, such as being an active employee in a particular location or department. Examples can include email, collaboration tools and a standard employee portal.
Birthright access should be minimal, policy-driven and removed automatically when eligibility ends. Treating broad or sensitive privileges as birthright access creates hidden privilege accumulation.