Role Based Access Control (RBAC)


Partners Consulting’s Solutions Division understands that executives today, given the increased need for business efficiencies, regulatory compliance and auditing require their human resources, information technology and security administration professionals to create a long-term strategy around Role Based Access Controls (RBAC).

Role based initiatives allow an organization to maintain system entitlements based on a user’s job function within that organization by only granting access to systems or services based on necessity. Once an organization has established a sound identity management processes, RBAC will offer the following benefits:

  • Simplified user provisioning with more accurate control focused on job function
  • User access rights can be determined for an entire group of users at the position level not at the individual level
  • Enhanced segregation of duties (SOD)
  • Simplified compliance reporting through automated attestation on job function

In order to help executive management staff meet this requirement for an RBAC strategy our Solutions Division has developed a simplified service offering that walks our clients through the assessment of enterprise roles, reviewing that clients established IdM / IAM technologies, developing a gap analysis, reviewing vendor products and establishing a path forward. This service offering is our Roles Roadmap™.

Our Roadmap™ offerings are a consultative project that leverages our tools, templates and deep knowledge in the Roles and IdM space to consolidate a project that typically takes companies anywhere from two (2) to four (4) months to complete in as little as a six (6) week effort.

This service offering can also include the evaluation and piloting of industry leading Roles software products coupled with your IdM / IAM and GRC requirements if necessary.

The following outlines the high-level process our Consulting Solutions Division will walk our clients through when embarking on an roles initiative:

Stage 1 – Define

During this stage we will discuss the executive management’s vision and requirements for a unified roles strategy across the organization. We will also force-rank departments and their applications to determine the specific requirements that will guide further activities during the Roadmap™.

Stage 2 – Design

In the second stage of the Roadmap™ our consultants will take the requirements and vision from Stage 1 and create the initial Role Hierarchy Requirements and role based policies.

Stage 3 – Develop

The third stage of the Roles Roadmap™ includes developing necessary critical success factors (CSF), selecting an appropriate solution and engineering of basic roles. It is in this phase where a pilot or Proof of Concept (POC) or produce evaluations may occur if they were required.

Stage 4 – Deploy

The deploy stage of the Roles Roadmap™. Is where our Solutions Division will present our findings and recommendations to the client’s executive management as well as the information technology organization including a measurable and manageable “path-to-action” plan.

Stage 5 – Project Closeout

The final stage of the project is where we will work with the client to identify when and how they would like to move forward according tou our “path-to-action”. This also includes implementation planning and project planning for the next stage.