In IAM, which term represents the permissions granted to user identities for resources?

In IAM, which term represents the permissions granted to user identities for resources?

• A. Orphan Accounts
• B. Access Rights
• C. Awareness Campaigns
• D. Service Owner

Answer: (B)

Access rights are the permissions granted to user identities to perform actions on resources. In IAM, these rights determine what a user can do—viewing, editing, deleting, or managing a resource—by attaching them through roles, groups, or policies. This framework supports the principle of least privilege, ensuring users have only what they need to do their job. Other terms mentioned describe different ideas: orphan accounts are unused or unowned accounts, awareness campaigns relate to training, and a service owner is the person responsible for a service rather than a set of permissions. So, the concept that fits best for permissions granted to user identities for resources is access rights.

Access rights are the permissions granted to user identities to perform actions on resources. In IAM, these rights determine what a user can do—viewing, editing, deleting, or managing a resource—by attaching them through roles, groups, or policies. This framework supports the principle of least privilege, ensuring users have only what they need to do their job. Other terms mentioned describe different ideas: orphan accounts are unused or unowned accounts, awareness campaigns relate to training, and a service owner is the person responsible for a service rather than a set of permissions. So, the concept that fits best for permissions granted to user identities for resources is access rights.