In what sequence should account adjustments and entitlement adjustments be done for effective identity management?

• A. Entitlement adjustments first then account adjustments
• B. Account adjustments first then entitlement adjustments
• C. Either sequence is acceptable
• D. It depends on user roles

Answer: (B)

The preferred sequence of performing account adjustments followed by entitlement adjustments is rooted in the principles of effective identity and access management. When account adjustments are made first, it ensures that the underlying identity data is accurate and reflects the current state of the user. This could involve modifying personal information, such as names, job titles, or other identifiers that are critical for linking to the correct entitlements.

Once account adjustments are completed, it permits entitlement adjustments to be accurately executed based on the current account details. Entitlements refer to the permissions or access rights assigned to a user, which should be tailored to their role or the modifications reflected in their account information. This sequence minimizes errors that could arise if entitlements are adjusted first without ensuring the account data aligns correctly, as misaligned information can lead to users having inappropriate access or missing necessary permissions.

The effectiveness of this sequence is particularly relevant in maintaining compliance and security within the identity governance framework, as ensuring that entitlements are properly informed by accurate account data helps in enforcing policy controls effectively.