Authorization
Secure management of access authorizations
High security and control over employee access:
Automate key tasks and meet regulatory requirements.
Manage permission groups, department groups, and
email distribution lists in one efficient portal.
Add one or more decision makers to review requests and approve or decline access on a point-in-time basis.
Define flexible roles
for your employees, that precisely and reliably regulate access authorizations.
Automate repetitive work processes by scheduling a variety of tasks and letting them run automatically.
Authorization Management with FirstWare IDM-Portal
Access management
With FirstWare IDM-Portal, you can easily assign permissions thanks to secure and user-friendly interfaces.
Create department and permission groups and give them access to relevant resources, e.g. file folders. This way, all members of a group automatically have access. Individual customization for individual employees is no longer necessary.
Put the maintenance of e-mail distribution groups in the hands of the employees who own the distribution group.
Approval workflows
As soon as you place Identity & Access Management tasks in the hands of non-IT departments, you can set up security levels.
These approval workflows ensure that
- group memberships are only granted to authorized persons,
- data changes are made appropriately.
If a specialist department requests memberships in sensitive groups, the IT, as the deciding authority, can approve or reject.
It is also possible to involve several decision-makers from different departments in multi-level approval processes.
Role-based permissions
By setting up roles in IDM-Portal, authorizations can be tailored precisely. As a result, each employee can only see and edit what he or she needs to work with.
Your employees receive individual, reduced and fast overviews. Assigning authorizations provides additional security to the IT and other departments.
Role Based Access Control (RBAC) is a core feature of FirstWare IDM-Portal.
Single sign-on
Single sign-on (SSO) simplifies and speeds up work by allowing users to open all applications with a single password.
Action-based single sign-on means performing actions in other applications directly with IDM-Portal. Using PowerShell in the back end, you control third-party systems based on roles – automatically.
Access many applications by logging in with IDM-Portal only once.
Automation
IAM Automation speeds up many steps in Identity & Authorization Management and reduces manual errors.
Automation features include:
- automatic filling of input fields
- automatic password generation
- approval workflows
- time control
Data inputs cause immediately visible changes and perform important actions in the background.
In addition, the implementation of data changes and approvals can be time-controlled, i.e. immediately or at a specific time.
