Smart Access Rights Automation
Automate standard JML access-right assignment, cleanup, and review readiness.
The problem
Access rights, grouped into IDM Roles, must be granted and revoked throughout each user's lifecycle:
- So-called "birthday rights" during the JOIN process - Update of default access rights during the MOVE process, with or without a grace period - Cleanup of access rights during the LEAVE process
All of this can be manually coded and configured in IDM, but it is cumbersome, tedious, and hard to maintain. Moreover, when an organization wants to automate, the current state is often difficult to capture and model correctly in IDM. As a result, no one wants to take responsibility for activating a new fully automated process because of the risk of removing legitimate access rights from some users.
The solution
Use SARA components to automate 40% to 80% of these access-right scenarios through simple configuration. Add an optional grace period on a role-by-role basis to ease transitions during a MOVE. Import your current state into the system so no access right is removed too early, giving the organization time to clean up past inconsistencies at a reasonable pace.
Implement advanced capabilities without classic limitations, such as multi-level nested groups, including provisioning in AD.
SARA automates most of your Roles scope for most of your users, giving you more time to focus on higher-value IAM topics.
40% to 80% of standard access-right scenarios automated through configuration, not code. Grace periods and import-based protection prevent premature revocations.
Component map
What makes up SARA. Click any product to explore.
What SARA delivers
40-80% standard rights automation through configuration
safer joiner, mover and leaver execution
role-by-role grace period support
import-based protection against early over-removal
review-ready role logic
less custom policy code
Operational claims
40-80% of standard rights can be automated through configuration
grace periods reduce mover disruption risk
supports phased automation instead of all-or-nothing change
production-proven lifecycle patterns
Core components
The essential building blocks of SARA.
Supporting components
Complementary capabilities included in SARA.