Your role model is already
in your data.
Eight mining algorithms read your actual access patterns and propose roles in plain language — "12 people in Finance share this access" — deduplicated across algorithms, and formalized in one click once you name an owner.
Business stories, not cluster IDs
The consulting workshop is the product.
Identity-type baseline, org-unit, job-function, internal-vs-external, permission clustering, context membership, context hierarchy and multi-context combinations all run in parallel. Overlapping proposals are merged with a rationale, so you review one proposal with full lineage instead of eight duplicates.
- Plain-language proposals with cohort, intent and impact
- Cross-algorithm deduplication with a merge rationale
- Evidence per proposal: who, what, and how strong the pattern is
- A role can't be formalized without an owner — the gate is in the service, not just the button
Roles as governed objects
A role has an owner, members, content — and a lifecycle.
Formalized roles live in the catalog with ownership and composition visible, and move through an explicit pipeline: draft → pending approval → active → scheduled offboard → decommissioned. Role content changes trigger a review of the role itself; the role's grants flow through the same reconciliation evidence as everything else.
- Role catalog with owners, members and composition
- A role pipeline per lifecycle stage — see what's in flight, steer decommissioning
- Role-content changes spawn an event-triggered review
- Offboarding runs as a deprecation plan with a grace window — 30 days by default, tenant-configurable. When it expires the sweep revokes the remaining holders and retires the role; cancel before then and the role returns to the stage it was in
See role mining on your data on your own data.
A 30-minute kickoff connects your HR feed and one system — working POC the same day.
Bring your HR feed plus one system you trust us to read — that is all the kickoff needs. No NDA, no second call with a sales engineer, no procurement form.