{"id":5092,"date":"2020-10-02T16:01:17","date_gmt":"2020-10-02T20:01:17","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=5092"},"modified":"2020-10-02T16:01:17","modified_gmt":"2020-10-02T20:01:17","slug":"identity-management-isnt-all-authentication-its-about-permissions-too","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/","title":{"rendered":"Identity Management Isn’t All Authentication. It’s About Permissions Too"},"content":{"rendered":"

\"Identity<\/p>\n

The discourse surrounding identity and access management tends to center on authentication. On the surface, it is easy enough to see why; the majority of attacks begin with compromised or stolen credentials and bypassed authentication. If hackers obtain the means to enter your network through the authentication portal, detecting them and mitigating the damage can take valuable time and resources.<\/span><\/p>\n

Therefore, most attention is paid to how recognized users enter and exit the enterprise network. Often, this takes the form of multifactor authentication (MFA), which includes biometric authentication, geofencing, and other key capabilities. Additionally, many vendors now boast continuous authentication even after the initial login stage through behavioral biometrics and the like.<\/span><\/p>\n

However, this discourse around authentication tends to neglect conversations about <\/span>what <\/span><\/i>your recognized employees can actually do on your network once they log in. What sorts of permissions and privileges does the average user have, and how do they gain those permissions? How do they gain new permissions? Who regulates or rescinds them?\u00a0<\/span><\/p>\n

This conversation isn\u2019t speculative. Instead, it speaks to a problem suffered by enterprises around the world: access creep.\u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/b><\/p>\n

How Access Creep Works Via Permissions<\/b><\/h2>\n

Take the average user, let\u2019s call her Carol. Carol has average credentials for her role in the enterprise (a challenge in itself, but we\u2019ll come back to that). Suddenly, Carol\u2019s coworker becomes sick, and her boss asks her to take over their activities as well as her own.\u00a0<\/span><\/p>\n

To do this, they give Carol temporary permissions. She does the job fairly well, and eventually, her coworker returns. Except now, the IT team that gave her the permissions is focused on something else, and forget to rescind those temporary permissions.\u00a0<\/span><\/p>\n

Now Carol has de facto permanent access to both her own resources as per her job and those of her coworker. As this cycle repeats over and over again, Carol\u2019s credentials demonstrate access creep, which a savvy hacker can exploit. With greater potential in the business network comes the greater potential for long-term damage inflicted by a threat actor.\u00a0<\/span><\/p>\n

Worse, because the IT team forgot that Carol had these permissions, they may not realize the extent of the damage or even that there is damage until far too late. After all, this activity is \u201cnormal\u201d according to the rules of the system. In other words, it won’t trigger an alert.\u00a0<\/span><\/p>\n

Now let\u2019s take the opposite approach: what if Carol becomes hostile to the business. Perhaps she leaves the company disgruntled, and decides to take revenge on the network. Your IT team may have rescinded her original permissions…but do they know about the other permissions she possesses?<\/span><\/p>\n

This is where identity governance and administration (IGA)<\/a> steps in. It helps regulate how employees receive permissions and provide critical visibility into each employee\u2019s permissions. Further, IGA can set timers on temporary permissions to ensure that employees can\u2019t accumulate permissions by accident.\u00a0<\/span><\/p>\n

IGA Smooths Out the Onboarding and Offboarding Process<\/b><\/h3>\n

In addition to maintaining control over current permissions, IGA enables your business to maintain control over both future and historical permissions as well. IGA can help your enterprise establish set roles for new employees to slot into when they join. These roles each come with an established and modifiable set of privileges so that employees have exactly what they need to do their job and no more.\u00a0<\/span><\/p>\n

Further, IGA can help remove employees that have left the business entirely, including all of their permissions. This helps prevent the formation of orphaned accounts, which hackers can exploit later.\u00a0<\/span><\/p>\n

<\/div><\/p>\n

You can learn more in our Identity Governance and Administration Buyer\u2019s Guide<\/a>.\u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

The discourse surrounding identity and access management tends to center on authentication. On the surface, it is easy enough to see why; the majority of attacks begin with compromised or stolen credentials and bypassed authentication. If hackers obtain the means to enter your network through the authentication portal, detecting them and mitigating the damage can […]<\/p>\n","protected":false},"author":41,"featured_media":4581,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,16,76,286,397,188,1546],"acf":[],"yoast_head":"\nIdentity Management Isn't All Authentication. It's About Permissions Too<\/title>\n<meta name=\"description\" content=\"What are permissions from an identity and access management perspective? How can they determine your level of cybersecurity?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/\",\"name\":\"Identity Management Isn't All Authentication. It's About Permissions Too\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/09\/Hacker-New-Image-Mod.jpg\",\"datePublished\":\"2020-10-02T20:01:17+00:00\",\"dateModified\":\"2020-10-02T20:01:17+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"What are permissions from an identity and access management perspective? How can they determine your level of cybersecurity?\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/09\/Hacker-New-Image-Mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/09\/Hacker-New-Image-Mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"CVS Database Containing Over 1 Billion Records Exposed\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Identity Management Isn’t All Authentication. It’s About Permissions Too\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer's Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Identity Management Isn't All Authentication. It's About Permissions Too","description":"What are permissions from an identity and access management perspective? How can they determine your level of cybersecurity?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/","url":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/","name":"Identity Management Isn't All Authentication. It's About Permissions Too","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/09\/Hacker-New-Image-Mod.jpg","datePublished":"2020-10-02T20:01:17+00:00","dateModified":"2020-10-02T20:01:17+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"What are permissions from an identity and access management perspective? How can they determine your level of cybersecurity?","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/09\/Hacker-New-Image-Mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/09\/Hacker-New-Image-Mod.jpg","width":800,"height":400,"caption":"CVS Database Containing Over 1 Billion Records Exposed"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/identity-management-isnt-all-authentication-its-about-permissions-too\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Identity Management Isn’t All Authentication. It’s About Permissions Too"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer's Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5092"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=5092"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5092\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4581"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=5092"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=5092"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=5092"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}