Glossary
Glossary
The words used in user access reviews and their evidence, each in plain language.
A
- Access certification
- Access certification is another name for a user access review: someone with authority confirms, item by item, that access is still right.
- Attestation
- An attestation is a written statement by a named person that something is true, kept as a record: "I reviewed this list and it is right".
E
- Entitlement
- An entitlement is one specific thing an account is allowed to do in a system, such as holding a role or belonging to a group.
- Evidence pack
- An evidence pack is a bundle of files that together show what was reviewed, who decided what, and what the systems held at the time.
H
- Hash chain
- A hash chain is a list of records in which each record holds the fingerprint of the one before it, so a change to one breaks the rest.
L
- Least privilege
- Least privilege means giving each person and program only the access needed for the work, and nothing more.
O
- Orphaned account
- An orphaned account is an account that still works but no longer belongs to a person or program that needs it.
P
- Privileged access
- Privileged access is access that lets an account do things ordinary accounts cannot, such as change other people's access.
S
- Segregation of duties
- Segregation of duties means no one person holds enough access to complete a risky action alone. It is also called separation of duties.
U
- User access review
- A user access review is a regular check, by people who know the work, that each person still needs the access they have.