What is Identity and access management?

The processes and technologies controlling digital identities and access rights.

This term should be understood in relation to the information, platforms, integrations, controls and operating requirements that support commercial work. In practice, Identity and access management should be defined clearly enough that the people responsible for the relevant decisions can apply it consistently, recognise its limits and identify the evidence needed to evaluate it.

When this concept is unclear or disconnected from the wider revenue environment, teams can make locally reasonable decisions that create friction elsewhere. A useful application makes ownership, dependencies, expected outcomes and trade-offs more visible.

Consider how Identity and access management affects the movement from strategy and demand through conversion, customer value, expansion and continuous improvement. The relevant people, processes, technology, data and governance should support the intended commercial outcome rather than operate as an isolated capability.

Commercial Architecture examines the relationships between strategy, people, process, technology, data and governance. Identity and access management is one part of that wider design. It should not be treated as evidence of a complete Governed Revenue System by itself.

The practical meaning of Identity and access management depends on the role using it. Executives need to understand its effect on direction, risk and investment; commercial leaders need to connect it to performance and accountability; and specialist teams need clear processes, information and decision rights for operating it.