Access Panel (New)

Access Panel is an identity and resource governance solution lives within the Identity Panel software platform. Access Panel leverages Identity Panel’s existing connector integration to offer hybrid event and state based management of resources in Active Directory, Azure/Office 365, database driven line-of-business applications, Service Now, and other platforms. Access Panel can manage traditional role oriented entitlements like group memberships, but also has flexibility to manage applications that use ACL and attribute based permissions control.

Access Panel provides organizations flexibility by seamlessly integrating features from several theoretical frameworks, including ABAC (Attribute Based Access Control), Just-in-Time access provisioning, traditional RBAC (Role Based Access Control). And Attestation and Access Review models with requests, recurring review, risk modeling, and access expiry.

Capabilities shipping now:

Multi-Source Resource Management

• Define multiple scopes and sources for users and resources including:
• AD
• Generic LDAP
• Azure groups, licenses, and roles
• Database line of business apps
• HR systems
• ServiceNow
• etc.
• Entitlements derived from:
• Reference attributes,
• Multi-value attributes
• Single-value attributes
• Rule-based objects

 ABAC

• Criteria based entitlement management
• Handling of group scenarios with native criteria (e.g. Azure dynamic groups)
• Member exception management
• Exclusive exception management
• Support for criteria based candidacy

 Just in Time

• Support for candidate members with just in time activation
• Policy for processes on candidate activation including:
• Activation time windows
• Approval policies (owner/manager)
• Activation extension policies

 Requests and Expiry

• Group join requests
• Policy based on group risk and application association
• Self, Manager, Owner, and multi-response request policies with escalation rules
• Enforced and optional entitlement expiry policies with extension notifications
• Support for Email and SMS based approval flows