Which term covers the processes of granting and revoking access rights to users?

Which term covers the processes of granting and revoking access rights to users?

• A. Provisioning and De-Provisioning
• B. Strategy
• C. Enforcement
• D. Cybercrime

Answer: (A)

Granting and revoking access rights to users are described as provisioning and de-provisioning. In IAM/CIAM, provisioning creates and configures user accounts, assigns the appropriate roles and permissions to allow access, while de-provisioning disables or removes those rights when the user leaves or changes roles. This pair covers the full lifecycle of a user’s access, ensuring access is granted when needed and removed when it’s no longer appropriate, which supports least privilege and better security and compliance. The other terms don’t fit the scenario as precisely. Strategy is about high-level planning and direction, not the concrete steps of granting or removing access. Enforcement refers to applying policies and controls, but it doesn’t inherently describe the lifecycle of user access rights. Cybercrime is unrelated to the process of managing user access.

Granting and revoking access rights to users are described as provisioning and de-provisioning. In IAM/CIAM, provisioning creates and configures user accounts, assigns the appropriate roles and permissions to allow access, while de-provisioning disables or removes those rights when the user leaves or changes roles. This pair covers the full lifecycle of a user’s access, ensuring access is granted when needed and removed when it’s no longer appropriate, which supports least privilege and better security and compliance.

The other terms don’t fit the scenario as precisely. Strategy is about high-level planning and direction, not the concrete steps of granting or removing access. Enforcement refers to applying policies and controls, but it doesn’t inherently describe the lifecycle of user access rights. Cybercrime is unrelated to the process of managing user access.