SARA

Automate 40-80% of JML access-right scenarios through configuration

automationlifecycleaccess-control

The challenge

Granting and revoking access rights during joiner-mover-leaver processes can be manually coded in IDM, but it is cumbersome, tedious, and hard to maintain. No one wants to activate full automation because of the risk of removing legitimate access.

The outcome

SARA components automate standard access-right assignments through simple configuration. Grace periods on a role-by-role basis ease transitions. Import-based protection prevents premature revocations while the organization cleans up inconsistencies.

How it works

Click any product to explore its details.

Bundles involved

SARA

Smart Access Rights Automation

Automate standard JML access-right assignment, cleanup, and review readiness.

Products involved

B01

EmptyPersonalRole

Revokes or empties a user's Personal Role when key org attributes change, preventing access drift and improving mover safety.

B19

AutoGroup

Updates group membership automatically when authoritative attributes like department or role change, keeping access groups aligned without manual effort.

B24

RolesWithGracePeriod

Keeps a copy of revoked roles for a configured grace period after revocation, reducing disruption risk and enabling smoother transitions.

B30

AssignRole

Assigns or revokes roles when external workflows write instructions into IAM-EventTriggers, executing deterministic role changes without direct RBPM APIs.

Ready to solve this?

Request a demo More use cases