Chapter 3. Identity and Access Management
Any organization using IT services may have a number of resources, processes, environments, projects, and operational activities. All the organizational activities are carried out by various departments. There is always a clear distinction as to who needs to do what. Infrastructure and operational activities are performed by a specific set of personnel in the organization. Similarly, there may be a development team, testing team, project team, finance team, security team, and other relevant teams in the organization that need to perform specific tasks in the organization.
As there are various teams to perform different activities in the organization, similarly there is a clear set of responsibilities and accountability for each of the individuals in a team. A developer may not need to access testing resources. Similarly, a testing resource may not need access to production environments. On the other hand, a system administrator may need to access...