Skip to main content

← Back to glossary

Term · 3. Account Management & Provisioning

HR Policy

IDM/IGA Domain

Definition

Policies governing identity lifecycle based on HR data — what triggers provisioning, what role mapping applies, what approval is needed for exceptions. Examples: «contractors get standard contractor profile + 90-day expiry», «promotion triggers re-certification of access», «termination triggers immediate session termination across all systems».

Application
Codified in IGA platforms as workflow rules, role assignments, and policy decisions. Often co-owned by HR (process owner) and IT/Security (technical implementation). Foundation for SOX, SOC 2, and ISO 27001 access management evidence.