Organization, Identity, Access, and Governance
Administration — People & Access
On this page
Navigation: Administration → People & Access
Primary audience: identity administrators, security administrators, access reviewers, and delegated business owners
Purpose
People & Access manages user directory records, roles, groups, object assignments, customer collaborators, privileged access, SSO, MFA, provisioning, expiry, and periodic access review.
Scope controls and indicators
Directory filters active, invited, suspended, expired, or all permitted identities. Role filters assignments. Access State filters active, privileged, temporary, pending, or review due. Review Due limits upcoming reviews.
Active Users shows enabled accounts and SSO coverage. Privileged Roles shows high-impact assignments. Access Reviews Due identifies users requiring attestation. MFA Coverage shows required authentication enrollment.
People and access register
Each row shows person, roles and groups, scope, access state, pending changes, identity source, authentication state, last review, and expiry. Selecting a person opens assignments, inherited access, object scope, recent approved changes, and authentication posture.
Selected user
The detail panel shows SSO provider, MFA enforcement, managed device requirements, groups, role assignments, project or customer scope, privileged status, and pending requests. It does not expose personal development information.
Supporting analysis
Authentication posture summarizes SSO, MFA, managed device, and recent sign-in coverage. Privileged access shows review cadence and assignments by sensitive role. Access actions provides review, expiry, and remediation work.
Actions
- Invite, suspend, reactivate, or archive a user under policy.
- Add or remove a role, group, or object assignment.
- Set or review temporary access and expiry.
- Start or complete an access review.
- Require authentication remediation.
- Export a governed access-review record.
Recommended procedure
Grant the narrowest role and object scope required. Use groups for stable responsibilities and temporary assignments for exceptional access. Review privileged and restricted roles first, record the business owner decision, and remove access promptly when no longer needed.