Identity & Access Management for Applications | Access Governance

The Identity & Access Governance team facilitates application owners and managers to verify users’ access and privileges in order to reduce risk to KP systems and resources that is associated with end user privileges.

Termination Notification Service

The Termination Notification Service (TNS) provides email and/or Service Now ticket notification to application teams when users have an employment status change (termination, transfer, or leave of absence). 

When to use this service

This service is used when an application team needs to know about employment status changes in order to keep their user access up to date. TNS is mandatory for SOX applications that cannot use KPIM for self-service access requests or automated provisioning services. TNS notification is designed for manual de-provisioning. Clients who are looking to develop application auto-deprovisioning should use the Automated Provisioning Service.

Getting Started

You have two ways to request this service:

Access Review and Recertification

This service supports periodic reviews of users’ access to sensitive resources. This service is available via CARMA (Central Access Review Management Application), which is a web-based application for automating access recertification, including access remediation tracking per review results or audit policies, and built-in auditing and reporting. This service aims to prevent fraud and errors by having multiple users share tasks and associated privileges for a given business process.

When to use this service

This service is available for any access recertification use. Standard use is limited to capabilities that can be met with out-of-the-box CARMA functionalities. Refer any custom implementations to IAM Architecture for solution consultation, such as custom data stores and data processing outside of the existing SQL queries or connectors, access remediation tracking for non-IAM connected systems, etc.

Getting Started

You have two ways to request this service: