Parent Process Reference Framework:  ITIL

Life Cycle:  Service Operation

Access Management

Access is the term that describes the level and extent of the service functionality granted to a user based on the user identity. Here, User Identity refers to the attributes that uniquely distinguishes one individual from another and also verify their status within the organisation.

The primary objective of ITIL Access Management Process is to grant authorized users the right to use a service while preventing access to non-authorized users. 

Some other important objectives of this user access management process are as follows: 

• Manage access to services based on policies and actions defined in Information Security Management. 
• Processing any request for granting access to services, changing access rights, restricting access, and ensuring that the rights being provided or changed are properly granted. 
• Grant access to services, data or functions, only if they are authorized to get that access. 

• Manage access to services, prevent improper use of access rights, and remove access when people change roles or jobs. 
• Help to protect the confidentiality, integrity, and availability of the organization’s services, assets, facilities, and information. 

Skills

SFIA ‘s skill Security Administration is related to Access Management.

https://www.sfia-online.org/en/framework/sfia-7/skills/service-management/service-operation/security-administration

Training

ITIL Foundations training