Beyond Yes or No: Streamline Access Reviews with Customizable Actions

In identity governance and administration (IGA), traditional access reviews give only a binary choice to the reviewer: Accept or Remove. This rigid approach can hamper productivity or, worse, threaten security as it leads reviewers to make ill-informed “rubber stamp” decisions.  Even augmenting access reviews with artificial intelligence has limits, as AI solutions currently pale in comparison to human intelligence in understanding the details and business context of entitlement grants.

Clear Skye IGA allows for customized review actions, which can be used for a variety of purposes, including:

• Requesting more information
• Passing the decision to a more appropriate colleague
• Alerting the security team of an issue to investigate
  

Customizable actions improve the efficacy of the certification process, reduce the risk of rubber stamp certifications, and ultimately improve the compliance process.

Templates Deliver Customization and Control

Clear Skye review templates dictate the behavior of an access review, including where the data is sourced from and what relationships or objects to look at in the identity warehouse. The related assigned review actions will vary depending on the desired business outcome.  For example, in a role ownership review, we may need to review who has membership to these roles or whether a role composition is accurate. Clear Skye also provides the ability to distribute the review across responsible parties. This provides a reliable foundation for IGA processes by helping to ensure the information in your identity warehouse is relevant, up-to-date, and more secure.

IT teams use Clear Skye to create templates (like the list above), making it easy for application owners to build workflows that gather the right business information to streamline access reviews.

Our extensible architecture empowers application owners to use the review process to deliver on business needs, for example:

• Build custom actions tailored to specific objects in the identity warehouse
• Determine whether to collect additional information from an end user
• Provide context to an action, leveraging rich HTML, to aid the business decision
• Define business outcomes with the ServiceNow workflow engine
  

Improve Identity Warehouse Data Quality

Identity governance professionals can be hesitant to connect to their IT environment for the access review process.  They often don’t fully trust the accuracy and freshness of the information in their data sources, and don’t want to find themselves dealing with “garbage in, garbage out.”

With Clear Skye, organizations improve the quality of the information in their identity warehouse, which improves the responses and related confidence in access-request decisions. Clear Skye’s review engine seamlessly connects to the identity warehouse, analyzing relationships within identity data.  

For example, an application owner could distribute reviews across the enterprise based on the relationships tied to the data itself without manually configuring who should receive it.

Friendly, accurate descriptions make it easy for reviewers to quickly make decisions related to permissions.  In addition, Clear Skye can show relationships to any data point that exists in ServiceNow, allowing identity governance admins to use the data that exists on those other objects and improving the data quality in your identity warehouse.

Fewer Rubber Stamps Streamline Compliance

By providing more detail and options in reviews, those responsible for maintaining and granting access can be better informed.  

Easily add additional actions, like comment bubble above, to give more control and insight than simply grant or deny access.

In addition to customizable actions, Clear Skye Access Reviews provides the following benefits:

• Improve security through access visibility
• Gain confidence in your identity data with review framework
• Meet compliance requirements with timely completion of reviews
• Automate access remediation and other workflows based on review data
• Streamline delivery of data and reports to auditors
• Meet specialized review requirements for critical applications (SOX)
• Reduce friction with a familiar UX
• Extend identity data beyond access reviews
• Avoid the challenges of new technology implementations
  

Additional Resources:

Clear Skye Access Reviews
See a demo

‍