What is the main purpose of account and entitlement aggregation?

• A. To connect all user accounts
• B. To manage access controls
• C. To align data from various sources to identities
• D. To eliminate duplicate users

Answer: (C)

The main purpose of account and entitlement aggregation is to align data from various sources to identities. Aggregation involves collecting and reconciling identity data from multiple systems, applications, or repositories. This process ensures that identity information, including user accounts and access privileges (entitlements), is consolidated in a central identity store.

By aligning data from different sources, organizations can achieve a more comprehensive view of user identities and their associated access rights. This alignment is crucial for effective identity governance, as it allows organizations to enforce security policies, ensure compliance, and manage risks associated with user access. Additionally, it supports identity lifecycle management by keeping all identity information up to date and consistent across the enterprise.

While connecting all user accounts, managing access controls, and eliminating duplicate users are important aspects of identity management, they are more specific operational activities that stem from the overarching goal of data alignment. The aggregation process is fundamental to understanding the complete identity context necessary for effective governance and security practices.