Autonomous Role Engineering (ARE)

A typical organization will have employees and contractors joining, leaving, and changing the teams all the time. It is a challenging task to ensure that each employee/contractor has the right set of privileges to perform his/her job, nothing more or nothing less.

Enterprises run a huge Access Risk operating in silos. Every Manager has a limited view of IT/Business roles contributing to Role Explosion. The knowledge that the same role was already created by another team and can be reused. This situation can snowball very quickly and can lead to very complex and confusing role definitions to manage. Nobody has a handle on how the roles are being created and assigned. Unmanaged role definitions can lead to a nightmare.

Wouldn’t it be great to have somebody overlooking the role definitions across your organization, and give you suggestions on when to create a new role vs using an existing one, typical roles that each team needs (based on their job descriptions) and eases out the whole certification process? Well, that’s where Autonomous Role Engineering (ARE) comes to the fore.

To begin with, ARE is a vendor-agnostic tool that can connect to any IDM platform. No matter how you are doing the identity and access management.

ARE imports the identities, role, and entitlement definitions from the organization’s existing IDM platform and runs its AI-powered engine on the data. The engine provides insights on identical roles and closely matching roles. It gives suggestions on what roles can be merged, what roles can be discardedand so on. This analysis can be done team-wise or for the entire organization too.

When the role definitions are adjusted and new business role definitions are created, ARE enables the role administrator to deploy these roles into your IDM at the click of a button.

When sufficient data is gathered, the AI-powered ARE engine can guide you in choosing the right role mix. It can suggest to you what roles are being requested more frequently so that the role administrator can group them into a business role. It also detects direct entitlement requests and provides suggestions to encapsulate them under an IT role.

ARE can seamlessly integrate into the typical application support tools like ServiceNow and JIRA. It can be configured that the users can place role assignment requests via these tools and the ARE application can analyze the request and suggest the right role assignments.

For example, a web developer requests access to a certain application. ARE engine looks at the profiles of his/her team members and suggests that there are other roles to be requested as well. Similarly, when a user requests for more privileged access, ARE can detect it and suggest the right role as per the job profile of the requestor.

ARE provides you insights into your role maturity both at a team level and organization-wide. It provides statistics on typically requested roles and entitlements.

It also helps the role administrator to understand the turnaround time taken to approve a new business role definition.

Overall, Autonomous Role Engineering provides a one-stop solution for all the role management challenges. It can help the organizations in creating the right role mix, reduce the turn-around times for role assignments and approvals, simplify the certification process and improve the end-user experience.