IAM Access Review and Governance System

Overview

This project demonstrates Identity Governance and Access Review workflows using Microsoft Entra ID within a simulated enterprise environment.

The implementation focuses on:

• Access certification
• RBAC validation
• Privileged access governance
• Stale identity analysis
• Governance reporting
• Audit readiness concepts

---

Architecture Diagram

---

Technologies and Concepts Used

• Microsoft Entra ID
• Security Groups
• CSV Reporting
• Identity Governance
• Access Certification
• RBAC (Role-Based Access Control)
• Group-Based Authorization

---

Governance Scenarios Implemented

Department-Based Access Management

Created department-based security groups to simulate enterprise RBAC structures.

Privileged Access Review

Simulated elevated access governance review using the Privileged-Access security group.

Stale Identity Review

Created a dormant account scenario (Old Employee) to simulate identity lifecycle review processes.

Access Certification Workflow

Performed simulated access review decisions:

• Retain Access
• Review Required
• Revoke/Disable Recommended

---

Governance Activities Performed

• Enterprise user creation
• Security group management
• RBAC simulation
• Access assignment review
• Identity inventory export
• Governance findings documentation
• Access certification review

---

Key IAM Concepts Demonstrated

• Identity Governance and Administration (IGA)
• Access Reviews and Certification
• Least Privilege
• Privileged Access Governance
• Identity Lifecycle Governance
• Audit Readiness
• Stale Identity Detection

---

Project Outcome

This project demonstrates how enterprise IAM teams review user access, identify governance risks, and enforce least privilege principles during periodic access review processes.