Permissions Management

THE CHALLENGE

A condition, commonly referred to as permissions creep or permissions sprawl, happens in just about every organization. Permissions are the rights a person or system has acquired in order to perform certain duties, operations, or to access specific applications, files, and data repositories. Over time people are commonly granted additional rights as their roles and responsibilities change within an organization.

Typically these new rights are granted by adding users into new groups or directly applying both users and groups to the various infrastructure layers within an organization starting from Active Directory, to Systems, Applications, and unstructured data repositories. Rights that are no longer required are seldom revisited or taken away. Couple that with 20+ years of management in some areas of the environment, combined with activities such as mergers and acquisitions, domain consolidations, organizational growth and turnover, and migrations have made it nearly impossible to adequately management and maintain permission let alone the data lifecycle itself.

Simply put, permission creep slowly erodes the principle of least privilege access. All security guidelines encourage restricting permissions to the minimum set that is necessary to do ones job. Whether you're in the Identity & Access Management group , Information Security, the CEO, CISO, an IT Administrator, Manager, or even an end User, everyone plays a vital role in keeping the organization's information and systems safe and secure. However, despite the involvement of so many different groups and individuals within the organization, existing management tools rarely cross the invisible boundaries created between different layers and across repositories, making the task of managing permissions even more difficult.

THE SOLUTION

The StealthAUDIT™ Management Platform (SMP) truly bridges the gap between the layers and across many repositories, providing a single product for all groups within the organization to leverage in the assessment, analysis, remediation, and validation of permissions and rights assignments. SMP contains both preconfigured and dynamic interactive capabilities to review who has access, who is accessing, and how individuals are gaining their access across applications such as Exchange, SharePoint, SQL Server, File Systems, Active Directory, and more.