Birthright Access

Birthright access is a term used to define a person’s initial access to IT systems based upon their role in the organization. It is the access they automatically receive by policy without generating any access requests. In EmpowerID, Birthright Access is generally automated through the use of Provisioning policies, also known as Resource Entitlement Policies or RETs. These policies govern how IT resources, such as Active Directory accounts, Exchange mailboxes, and Home folders are given to people. They are used to automate the provisioning, moving, disabling, and de-provisioning of resources for people and are evaluated each time a new EmpowerID Person is created or an existing Person is assigned to a new Business Role and Location, Management Role, group, or Query-Based Collection. RETs can be configured so that changes to these types of assignments trigger changes to the user accounts and other resources assigned to those people.

A common use case for Provisioning policies could be for differentiating resources received during the onboarding process. For example, if a company employs contractors along with standard employees, they could configure RET policies to automatically provision an Active Directory account, a mailbox, and a home folder each time a new employee is onboarded, but only provision an Active Directory account and a mailbox for contractors. And in the event a contractor becomes a standard employee, or an employee becomes a contractor, these policies could take the appropriate action and do things like move their user accounts to a corresponding OU and provision or de-provision resources accordingly.

To access provisioning policies in the EmpowerID Web interface, do the following:

1. On the navbar, expand Identity Lifecycle.

2. Then select Provisioning Policies(RETs).

Open

Provisioning Policies