Role-based access control

Control access to your data

Involve business departments without security risks:

Role-based access authorizations even for non-IT employees.

Access management

Access rights

Approvals

The user perspective

As an employee or manager of a business department, you have other requirements than IT.

You want to complete your tasks with the appropriate permissions.

Employees and managers want to:

see only relevant data

work independently and individually

do their jobs efficiently

With IDM-Portal, data and access are organized individually. Users do not need any in-depth IT knowledge.

Appropriate IAM roles are defined and configured in advance.

Identity management for users

The RBAC solution

Define authorizations and functions in roles

Via FirstWare IDM-Portal, an individually tailored authorization concept is created.

This takes into account the tasks, resources and groups of people in the respective company.

It specifies exactly what access the IDM roles have to the portal.

Rather, it defines the rights to access data in the various identity poviders (e.g., Active Directory, Azure AD).

Different departments access data of the same employee, while seeing and managing different data.

In practice, user-friendliness and fast access are the key factors for success.

Main features – Role-based access control

RBAC – Organize role-based access management

FirstWare IDM-Portal provides you with a solution with flexible roles for Role Based Access Control (RBAC).

You define the roles and associated permissions. Employees use them for updates in IDM-Portal’s Self Service view.

In business departments, colleagues take over various tasks – without companies losing control over security.

Access rights and role-based automation

With the help of IDM-Portal, you can define customized access rights, such as “read and write”. In addition, constellations such as “may write but not read” are also possible.

These permissions apply to both:

certain properties/attributes of employees,
as well as to permissions of resources.

Views can be designed depending on the role – just like automated actions.

Approval of authorizations

Assigning permissions can also cost the IT department a lot of time. Allow non-IT staff to perform role-based approvals.

Role Based Access Control (RBAC) can go well beyond controlling individual actions:

What attributes may be edited?
Which functions are activated?
Which tasks can be automated?

You define the scope of the roles – we support you with best practice experience.