03 · Govern · Rules for who should have access

Access policies

See who gains and who loses access before a rule goes live.

Reusable conditions define birthright, contextual and time-bound access. A live preview names the people a rule affects. A local exception is stored as an exception to the rule, so you do not have to copy the policy.

What changes

What you get

01

Access everyone gets from day one

02

Shared rules with local exceptions

03

See who gains and loses before go-live

04

Access that ends on a set date

Screenshot of the product · Fictional demo data
How it works

It works in three steps

Each step records its reason, and the next step uses it.

  1. Define

    Express who should have what and under which conditions.

  2. Preview

    Name the people and grants that would change.

  3. Reconcile

    Keep comparing what the policy intends with what the target systems actually hold.

What we stand behind

Before a policy goes live you know exactly who it affects.

Included

Included in every price

There is no module to buy for this. The price depends only on how many identities you govern.

How the price works See it in the product tour

Read by role
Access policies

See who gains and who loses access before a rule goes live.