Authorisation and roles
Which access belongs to which job?
You record that once in roles, based on job, department, location or another attribute from HR. Joinly grants that access automatically to everyone it applies to, adjusts it when something changes and revokes it when someone leaves. If you start with rights that have grown over the years, the authorisation matrix shows who has what and Joinly suggests the roles.
How roles work in JoinlyIn Joinly
From accumulated rights to roles
Every part has a page of its own, with the screens.
- Roles and RBACAccess on department and job. Someone who changes jobs loses what no longer fits.
- Authorisation matrixPer department and job which access there is, ready to export.
- Role miningCleaning up accumulated rights: roles from the access that is there, and outliers in view.
- Segregation of dutiesA conflicting combination of rights is held back and reported, with status and decision.
Explained
What authorisation is
The terms behind authorisation management.
- What is authorisation?What someone may do once they are authenticated, with RBAC and ABAC explained.
- What is authentication?The question that comes before authorisation: who are you?
- RBAC or ABACAccess by role or by attributes, and when you use which.
- RBAC and least privilege at a municipalityHow you set up role-based access and least privilege at a municipality.
- Requesting access yourselfWhy organisations let employees request access themselves.
Authorisation and roles
Frequently asked questions about authorisation
Which data can a role be assigned on?
Any field from your HR system: department, job, location, contract type or a custom field. You combine them, for example department Care and location Utrecht. When HR changes a field, the access moves with it.
What is the difference between RBAC and ABAC?
With RBAC, access hangs on a role; with ABAC, on attributes such as department, location or contract type. The best models use both: a role per job, and rules on attributes for what differs by department or location. Those attributes are already in your HR system.
How do I start if my access has grown over the years?
With the authorisation matrix and the role suggestions: they show which groups of colleagues already have the same access. You bring existing memberships along as a source, so nothing disappears. Then you introduce one role at a time, and role evaluation shows beforehand what will change.
Can I hand out temporary roles?
Yes. A role or a single right gets an end date, and on that date the access lapses by itself. That way contractors and interns never keep access longer than agreed.
Try roles yourself
In your free trial environment you see with demo data how roles grant access by job, department and location.
No credit card, nothing to install.
Rather talk to someone first? Talk to an IAM specialist