When are provisioning plans executed?

• A. Automatically at regular intervals.
• B. Only when a user requests access through an access request.
• C. When administrators perform manual changes.
• D. In response to system updates.

Answer: (B)

Provisioning plans are primarily executed in response to specific actions or requests aligned with access management. When a user initiates an access request, the system evaluates this request against existing policies and entitlement configurations. This triggers the execution of provisioning plans to ensure that the requested access is granted in line with compliance and governance policies.

The execution of provisioning plans in this scenario enables detailed control and oversight since it closely adheres to user requests and organizational standards. This tailored approach helps ensure that only the appropriate permissions are assigned based on clear needs, which is crucial for maintaining security and compliance in identity governance.

Regular intervals or automatic executions may seem efficient, but they do not provide the same level of governance and attention to individual user needs as action-based triggers do. Manual changes made by administrators also require different handling and processes compared to user-driven access requests. In contrast, system updates are related to technology maintenance and not directly linked to provisioning plans, further emphasizing that execution is primarily based on user-initiated requests.