Use this vocabulary when reading policies, RFPs, or product docs:
- Entitlement — a permission, role, group, or privilege granted to an identity in a system.
- Least privilege — only the access required for the job, nothing more.
- Segregation of Duties (SoD) — preventing toxic combinations (e.g. create vendor + approve payment) that enable fraud or error.
- Access certification — periodic or continuous review where owners confirm or revoke entitlements.
- Role-Based Access Control (RBAC) — permissions packaged into roles mapped to job functions.
- Attribute-Based Access Control (ABAC) — decisions based on user, resource, and context attributes.
- Orphaned account — an account with no active owner, often left after incomplete offboarding.
Browse the Knowledge Center glossary for A–Z definitions, and the comparisons section for side-by-side explainers like IGA vs IAM.
When these terms feel natural, continue to Core Concepts for RBAC vs ABAC, SoD depth, lifecycle, and access request flows.