Start with Identity
← Glossary
Concept

Entitlement

A specific permission or right an identity holds over a resource. Governance and CIEM exist to keep entitlements understood, justified, and minimal.

Entitlements are the unit governance actually operates on, and the reason IGA programs stall is that the raw names are meaningless to the humans reviewing them: APP_FIN_GL_RW_PROD tells a manager nothing. Programs that succeed invest in translating entitlements into business language and grouping them into roles, so certification asks "should this person approve payments" rather than "should this person hold this group".

See also: access certification, what is IGA, least privilege, role mining

Last reviewed By SWI Community TeamSuggest a correctionHow we research