Foundational Concepts Flashcards
What is the purpose of identity security
to securely manage and govern accounts, roles, and entitlements across all applications, systems, data, and cloud services, ensuring consistent and visible security practices throughout the entire organization.
Define Identity Cube
multi-dimensional data models of identity information that offer a single, logical representation of each managed user.
Define entitlements
the access rights an account has on a source
Define Roles
allow you to group related sets of access, from a single source or across multiple sources, to simplify access management for your users.
Define Governance Groups
is a group of users that can make governance decisions about access. If your organization has the Access Request or Certifications service, you can configure governance groups to review access requests or certifications.
Define Access Requests
Requests made by users, or on behalf of a user, to gain access to specific resources or systems. These requests may be for access to data, applications, networks, or other digital resources.
Define Certification Campaigns
a mechanism for reviewing and verifying user access to entitlements (sets of permissions) and approving or removing that access, helping organizations reduce risk of inappropriate access and satisfy audit requirement
Define Identity
Represents a person or entity within the organization
Identity Mappings
Configure the identities managed by SailPoint, specifying applications and attributes from which identity data is derive
Correlation
Match and assign source accounts to identities
Attribute Synchronization
Synchronize changes to identity attributes from authoritative sources to target systems
Data Segmentation
Define which users have access to specific data segments
Accounts:
Provisioning
Create, update, and delete accounts in target systems
What does the term ‘Accounts’ represent?
Represents a user’s access to a specific application or resource.
What is the purpose of correlation in account management?
Match and assign source accounts to identities.
What does provisioning involve?
Create, update, and delete accounts in target systems.
What is the function of attribute synchronization?
Synchronize changes to account attributes.
What does the search functionality do in account management?
Search for accounts within identities or by specific criteria.
What are account schemas used for?
Manage the attributes stored for each account source.
What is an Access Profile?
A collection of access rights or entitlements granted to an identity.
What is the primary purpose of Access Management?
Control and manage user access to resources.
How can Access Profiles be utilized in searching?
Search for access profiles within identities or by specific criteria.
What does Data Segmentation allow in relation to Access Profiles?
Define which users can view specific access profiles.
What is the function of Nested Queries in Access Profiles?
Use nested queries to search for data within access profiles.