What is Identity Governance and Administration?

Identity Governance and Administration (IGA) encompasses the policies, processes, and technologies used to secure an organization’s digital identities for all users, applications, and data.

The policies describe who has access to what, when that access is allowed, and for how long. The processes describe how access is enabled and also withdrawn. IGA solutions mitigate an organization’s identity-related access risks by automating the creation, management, and certification of user accounts, roles, and access rights for individual users, ensuring compliance, and enforcing segregation of duties.

More modern approaches are more subtle, and (usually) more effective – letting people get on with their jobs without exposing the organization to undue risks – and protecting key data from wrongful access. An example of this would be various features built into Microsoft Entra ID, for example, entitlement management (roles and access rights depending on user attributes, for example), privileged identity management (for example, just-in-time access based on role), and access reviews (reviews of who has access to what).


Need help with identity governance and administration in your enterprise? Look no further than here…. We are consultants as well as trainers!