Describing Identity Governance
Identity Governance is the full lifecycle monitoring and management of users in the company directory. This includes when they are first created or invited to Azure AD, their various roles within the company, and when they leave the company and no longer require access. Figure 7.1 outlines this lifecycle:
There are four levels to the Identity Governance lifecycle and the user identity:
- No access
- 1st job role
- 2nd job role (and subsequent job roles)
- Retiree/Left company
The next section will discuss how entitlements can be used for managing the Identity Governance lifecycle.