Definition
Maximum time an approver has to respond before request escalates or auto-decides. Typical settings: 3-5 business days for non-urgent, 24 hours for production access. On timeout: escalate to manager's manager, route to deputy, or auto-deny (rarely auto-approve due to security risk).
- Application
- Configurable in IGA workflow engines. Reduces «approval limbo» — requests stuck waiting for unresponsive approvers. Metric: 95th percentile approval time per workflow type.
Related terms
-
Aggregation (Aggr)
Process of collecting account and entitlement data from target systems into the IGA platform. Foundation for reconciliat …
-
Approval Route
Defined sequence of approvers an access request must traverse before fulfillment — typically manager → role owner → secu …
-
Birthright (BR)
Baseline access granted automatically to every identity of a specific type — typically minimal access required to functi …
-
Delegated Administration (DA)
Permission model where administrators delegate specific management functions to other users within scoped boundaries — t …
-
Deprovisioning (Deprov)
Removal of an identity's access from a target system — typically triggered by termination (Leaver), role change (Mover), …
-
Entitlement Creep
Gradual accumulation of access rights beyond what's needed for current job, as users change roles without losing prior a …