The Challenge

Manually provisioning and de-provisioning employees with applications, services and network storage is time-consuming, lowers productivity and increases security risk

• It takes too long for employees to get access to the resources they need to be productive

• When employees leave or change roles, they often retain their former access rights, creating compliance problems

• Managers are burdened by complicated procedures when provisioning new hires and may create security problems by authorizing rights incorrectly

• Proving compliance to access control policies and network storage regulations is difficult; companies have no efficient way to obtain the necessary data

Reasons for Problem

• Too much dependency on business managers to obtain the necessary resources for employees

• As users join or leave organizations, or change roles, their storage requirements and access rights need to be updated to prevent a security breach

• When an employee leaves an organization, there’s no process to reassign their resources to another employee

• Manual processes are time consuming, error-prone and inefficient for validating compliance

• Verifying what access has been granted within the enterprise requires excessive manual evaluation

Relevant Trends

• Enterprises need to improve the efficiency of their employees to stay competitive; automatic provisioning shortens the time to productivity

• Assuring that only authorized people have access to sensitive company data is a growing problem; user and group storage must be provisioned and de-provisioned based on roles and compliance with security regulations

• Regulations are requiring companies to retain employee-authored data for many years, causing an explosive growth in storage requirements

• Compliance policies are including what types of files can be stored in personal and group directories

Solution Overview

Automated provisioning and de-provisioning of resources for greater employee productivity and security compliance

Solution Capabilities

• Assigns and removes access to resources (applications, services, files and folders) based on employee role

• Synchronizes identity data enterprise wide for centralized provisioning and management

• Empowers LoB managers to control resources and business processes through a simple interface

• Allows users to request access to resources with automated approvals, proxies and exceptions

• Automates storage management based on roles in the organization

• Provisioning policies and separationof- duties policies give employees appropriate access without manual intervention

Value to Customer

• Improves employee and manager productivity while lowering security risk

• Reduces IT management costs and compliance costs

• Automatically revokes access privileges when an employee leaves, closing security loopholes

• Provides documented policies and data that allow your customers to properly govern access to services, applications, files and folders

• Includes complete “out of the box” role-based provisioning that scales to the largest enterprises

• Integrates well with third-party role modeling and mining tools