CHCon JED LAUNDRY – PUTTING THE ARR BACK INTO RBAC, https://2019.chcon.nz/talks/jed/
Are there more than 50 people in your organisation? So, you don’t know everyone’s life story and current employment agreement by heart? Uh-oh, that probably means there’s accounts in your systems that should’ve been removed a long time ago, and the accounts that should be there probably have permissions that they shouldn’t. Wouldn’t it be great if you could do The Great Account Audit more often than annually, by breaking up the work into manageable pieces and using “Logic” and “Rules” instead of “yeah nah, looks good!”? In this talk, Jed will take you through how to make credential lifecycle management a real part of your organisation, and demo the system he’s developed to make it easy for organisations to stay on top of it. Note: this presentation does not require Microsoft E11 licences.
- Actual access control checking is important
- Never run business processes from a spreadsheet :–)
- A Drupal app might be a better choice ...
- Security might run them, but (line manager + service owner) are needed to do the actual approval