Explore / Skills

Designing role-based access entitlement models

Derives access roles from job need and data classification, defines approval routes and approvers, recertification frequency and reviewer, expiry and revocation triggers (leaver, mover, time limit), and the toxic combinations to prohibit, so effective access can later be tested against the model.