{"id":406,"date":"2021-06-23T12:43:35","date_gmt":"2021-06-23T12:43:35","guid":{"rendered":"https:\/\/thecloudmarathoner.com\/?p=406"},"modified":"2021-06-23T12:46:09","modified_gmt":"2021-06-23T12:46:09","slug":"what-is-entitlement-management-and-how-it-can-help","status":"publish","type":"post","link":"https:\/\/thecloudmarathoner.com\/index.php\/2021\/06\/23\/what-is-entitlement-management-and-how-it-can-help\/","title":{"rendered":"What is entitlement management and how it can help?"},"content":{"rendered":"\n

Hello Cloud Marathoner’s,<\/p>\n\n\n\n

We are continuing our cloud learning journey with Azure services today. Last year Azure Active Directory has introduced many useful features and we will talk about one of them that simplifies the identity governance.<\/p>\n\n\n\n

“An Azure Active Directory (Azure AD) entitlement management<\/strong> is an identity governance feature that enables organizations to manage<\/strong> identity and access lifecycle at scale, by automating access request workflows, access assignments, reviews, and expiration. ” – Microsoft Azure AD Identity Governance<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Entitlement management example with one catalog and two access packages<\/p>\n\n\n\n

How can entitlement management help?<\/h3>\n\n\n\n

There are several ways how you could leverage these features for your Azure resource management activities. The easiest one to get started with is the delegation options:<\/p>\n\n\n\n

\u2714\ufe0f Delegate management of resources from high privileged account to managers
\u2714\ufe0f Govern access for users in your organization
\u2714\ufe0f Govern access for users outside your organization
\u2714\ufe0f Automate and simplify day-2-day management
\u2714\ufe0f View and report on resource assignments and access packages<\/p>\n\n\n\n

Let’s consider following two common scenarios:

First Scenario: <\/strong>As administrator you want to delegate access governance from IT administrators to users who aren’t administrators.
Check out the Video clip<\/a> for step-by-step guidance.<\/p>\n\n\n\n

Second Scenario:<\/strong> You would like to create an automated request process for your users to enable them request for an access package (set of Azure resources and accesses rights) to do their job.<\/p>\n\n\n\n

The request process of access packages can be simply understood by a help of a following sample infographic.<\/p>\n\n\n\n

\"\"
A user request for access package (set of resources) to start doing work assignments<\/figcaption><\/figure>\n\n\n\n

When I should use access packages?<\/h3>\n\n\n\n

It is not a silver bullet, so access packages do not replace other mechanisms for access assignment. However, following use-cases are most appropriate in situations where you would consider them:<\/p>\n\n\n\n