Enterprise Role Management
Moderator:
- Role Lifecycle Management 07.05.2009 10:30-11:30
-
Enterprise Role Management - A Pragmatic Approach to Roles
Role Lifecycle Management: Making Role Concepts WorkThe panel discusses the need for role lifecycle management at all level of roles and in sync with the management of policies and their lifecycles as well as user lifecycles. Role lifecycle management is essential for lean role management implementations. Roles have to be defined, approved, deleted and so on – in a structured way.
- Putting Context to Roles 07.05.2009 11:30-12:30
-
Dos and Dont�s when Introducing a Compliance Management Tool
Managing the Complexity of EntitlementsThe idea of using business roles to manage the entitlements of IT users is appealing and widely accepted. The ANSI/INCITS standard for RBAC (role-based access control) provides a reference model for grouping entitlements into roles and assigning roles to users. The challenge for role engineering is to maximize role usability and to minimize the number of roles so that users do not get more entitlements than needed. The goal is to end up with substantially less roles than users. Experiences...