Identity governance & Administration (IGA) provides tools for managing roles. Where identity management focuses on the lifecycle of a user, roles (technical to business) also have a lifecycle to manage. The roles associated with a person evolve over time and it is important to review assigned roles on a regular basis. Left unmanaged, accounts continue to gather entitlements which leads to accounts with access to multiple resources which they might no longer need (privilege creep).
Identity governance tools typically offer the following capabilities: