Excessive privilege is access beyond what an identity currently needs for authorized duties. It can arise from broad birthright access, poor role design, transfers, temporary projects, copied accounts, unmanaged group nesting or failed removal.
Excessive privilege increases the impact of mistakes and compromised identities. IGA reduces it through least-privilege policies, lifecycle automation, usage signals and review.