01
03 · Govern · Rules for who should have access
Access policies
See who gains and who loses access before a rule goes live.
Reusable conditions define birthright, contextual and time-bound access. A live preview names the people a rule affects. A local exception is stored as an exception to the rule, so you do not have to copy the policy.
What changes
What you get
02
Shared rules with local exceptions
03
See who gains and loses before go-live
04
Access that ends on a set date
How it works
It works in three steps
Each step records its reason, and the next step uses it.
Define
Express who should have what and under which conditions.
Preview
Name the people and grants that would change.
Reconcile
Keep comparing what the policy intends with what the target systems actually hold.
What we stand behind
Before a policy goes live you know exactly who it affects.
Included
Included in every price
There is no module to buy for this. The price depends only on how many identities you govern.
Access policies