Who we protect
Govern people and machines without making them share an identity.
Explore this feature →AIdentity / Privileged roles (PIM)
Activate privilege when the task calls for it
Privileged Identity Management separates eligibility from active authority.
What this means for your team
- Model eligibility, activation policies, assurance, scope and duration.
- Apply configured approval workflows and separation-of-duties checks to sensitive activation.
- Review emergency access, access campaigns and the standing-privilege inventory.
- Agent activation must respect its sponsor and applicable limits; revocation and expiry invalidate the grant.
A practical example
An operator activates a role for a maintenance window instead of holding it indefinitely.
How it works
Select a step to read its explanation
- Make an actor eligible to request privilege without necessarily giving them active authority.
- Request activation for a stated task and duration within the permitted scope.
- Apply assurance, separation of duties and the configured approval workflow before activation.
- Activate the approved role only within its scope and validity window.
- End the activation on expiry or revocation. Session handling follows the applicable product and target controls.
1 / 5
This example illustrates the journey. Select any step to explore it at your own pace.
Explore more AIdentity features
Authentication & MFA
Set the proof each sign-in or sensitive action must provide.
Explore this feature →RBAC, ABAC & ReBAC
Decide access using roles, attributes and relationships together.
Explore this feature →Identity lifecycle
Keep access aligned with joining, changing teams and leaving.
Explore this feature →Federation & applications
Connect applications and identity providers to a governed sign-in experience.
Explore this feature →Identity Graph
Understand who can reach a resource and which relationships give them access.
Explore this feature →Privileged access (PAM)
Govern access to privileged targets and credentials.
Explore this feature →Governance & approvals
Put reviews and independent decisions around sensitive access changes.
Explore this feature →Built-in agents & automation
Turn continuous identity analysis into evidence-backed recommendations and approved actions.
Explore this feature →Ask AIdentity
Ask questions about identity and access with authorization still enforced.
Explore this feature →Agent & device identity
Give agents and devices their own credentials, ownership and revocation path.
Explore this feature →Audit & privacy
Trace identity decisions while controlling access to sensitive evidence.
Explore this feature →