Abstract

ROLES AND RULES

Using a combination of roles and rules, IAM solutions can govern a user’s functional use of systems, applications and business processes.

In Chapter 16, we examine role-based and attribute-based access controls; behavioral and activity-based rules; defining rules based on toxic combinations of access at entitlement, role, and organizational levels; and integrating roles and rules to IAM solution components as preventive and detective controls. We also discuss top-down and bottom-up approaches to roles and rules management.

Links

• Amazon

Citation

Sussex, P.J. (2013). Roles and Rules, in: Osmanoglu et al. (2013). Identity and Access Management: Business Performance through Connected Intelligence. Syngress, an Imprint of Elsevier, Amsterdam, [Netherlands]. pp. 479–519.