Access Certification
Periodic review of who has access to what, with managers or resource owners attesting that access is still appropriate. A regulatory requirement in many industries and a core IGA workflow.
Certification is where governance meets reality, and it fails in a predictable way: reviewers rubber-stamp because they are shown raw entitlement names with no context on what the access does or who else has it. Campaigns that show usage data ("this account has not used this entitlement in 180 days") get real revocations. Campaigns that show a list of group names get approvals. Auditors increasingly ask for the revocation rate, not the completion rate.
See also: what is IGA, entitlement, segregation of duties, IGA vendors
Related on Start with Identity
- GlossaryCIEM
Cloud Infrastructure Entitlement Management. Tools that discover and right-size identities and permissions across AWS, Azure, and GCP, reducing excessive and un
- GlossaryIAM
Identity and Access Management. Workforce identity for employees, contractors, and partners. Covers authentication, authorization, lifecycle, and audit. Distinc
- GlossaryJoiner-Mover-Leaver (JML)
The three lifecycle events that drive identity changes: new hires (joiner), internal transfers (mover), and departures (leaver). JML automation is a core IGA ca
- BlogServiceNow closes its Veza acquisition at about 1.2 billion dollars
Announced in December 2025 and closed on 2 March 2026, substantially in cash. Veza, valued at 808 million dollars in its Series D, now supplies the permission g
- ArticleAccess Review and Certification Best Practices: Preventing Rubber-Stamping and Building Effective Governance
How to design access review and certification programs that actually work, moving beyond compliance theater to meaningful governance through micro-certification
- ArticleITGC Audits and Identity: The Access Certification Evidence Auditors Accept
What IT general controls actually require from an identity platform: automated access certification, lifecycle evidence, and segregation of duties, with the fou