Manage user access

The Access tile in the Aikyam Identity Console enables AIC administrators and business advocates to manage customer identities (access governance) at scale across the portal. It provides two primary functions for managing user access:

• Post-authentication control: Defines post-authentication permissions for users within the target portal.

• Self-service access management: Allows business advocates, such as application owners and group owners, to manage roles, permissions, and groups within their assigned scope. This ensures users have the right level of access to perform their tasks securely across the portal.

Access refers to different types of grants (permissions) that are available to authorized users on managed healthcare data and resources within applications. Access management enables you to model application roles and permissions based on the business roles and organizational divisions (Groups) and assign them accurately to the end users. This structure helps organizations avoid “access explosion” by ensuring permissions remain granular and business-specific.

Business advocates (Application and Group owners) dynamically determine who should have access to what resources, protecting against breaches and ensuring compliance with HIPAA and other regulatory frameworks.

These application permissions may include, but are not limited to: