Glossary
Browse Trustle's IAM glossary. Clear definitions of access management, identity security, JIT access, CIEM, RBAC, and other key cybersecurity terms.
Attribute-based Access Control (ABAC)
Attribute-based access control (ABAC) is a method of restricting access to resources based on attributes associated with the user or the resource being accessed. ABAC is a popular approach to access control in cloud-based applications because it offers granular control
Cloud Infrastructure Entitlement Management (CIEM)
Cloud Infrastructure Entitlement Management (CIEM) refers to the management of identities and privileges within cloud environments. Its primary objective is to comprehensively assess access entitlements in both cloud and multi cloud settings. By doing so, CIEM aims to
Development Security and Operations (DevSecOps)
Short for development, security, and operations – is the practice of integrating security continuously throughout the software and application development lifecycle to ensure optimal security and performance efficiency.It is considered a necessary extension of the DevOps methodology.
Dormant Account
A dormant account is an identity which exists, but has not been used for a period of time. The period of time required to quality an account as dormant may vary. For example, as you may only login to the DMV twice a year at most, the DMV could define a dormant account being “an account that hasn’t been logged into for more
Identity Attack Surface
An attack surface refers to the entirety of potential entry points through which unauthorized access to a system can be attempted. It encompasses all vulnerabilities, weaknesses, and endpoints that could potentially be exploited by malicious actors to
Identity Governance and Administration (IGA)
Identity Governance and Administration (IGA) empowers security administrators to effectively oversee user identities and access throughout the organization. It enhances their ability to monitor identities and access privileges, enabling them to implement the required
Identity Provider (IDP)
An identity provider (IDP) is responsible for storing and overseeing the digital identities of users. It can be compared to a guest list for digital and cloud-based applications, rather than a physical event. The IDP verifies user identities by means of username-password combinations
Just In Time (JIT)
Just-in-time (JIT) access is a concept that has gained traction in cloud computing security circles in recent years. JIT access involves granting users access to cloud environments only when they need it, and revoking that access as soon as it's no longer needed. This approach
Least Privileged Access (LPA)
Least privilege access (LPA) is the concept of giving a user exactly what they need to do their job access permission-wise – nothing more, and nothing less. Why is LPA recommended? With LPA, if an identity is compromised, or if a legitimate user assuming the identity makes a
Orphaned Account
Orphaned accounts are user accounts that have been deserted by their owners or are no longer associated with active users within the company. These accounts can be found in various applications, infrastructure, or systems used for business operations. An account is considered
Policy-Based Access Control (PBAC)
Policy-Based Access Control (PBAC) is an alternative access management approach centered around authorization. In contrast to RBAC, which limits user access using fixed roles, PBAC dynamically determines access privileges through rules and policies. While PBAC shares
Privileged Access Management (PAM)
Privileged access management refers to the management and control of privileged accounts and their associated access rights. This includes the identification and classification of privileged accounts, the enforcement of least privilege principles, and the monitoring of privileged
Privileged Account
A privileged account is any account which carries more privileges than a standard user account. For example, a standard user account may enable someone to login and send an email under their name. But a privileged account may allow for not only email sending, but also user
Role Based Access Control (RBAC)
Role-based access control (RBAC) is a security model that restricts access to computer resources based on the roles assigned to individual users within an organization. An RBAC system grants permissions based on the user's job function or title, rather than the individual's
Security Assertion Markup Language (SAML)
SAML is an open standard for exchanging authentication and authorization across three entities, the human user trying to login to a website or service, an Identity Provider (which contains the user’s username and password), and the Service Provider (which contains the
Standing Access
Standing access pertains to the continuous and unimpeded access to systems or resources, even when not immediately necessary. This form of access is commonly extended to privileged users like system administrators, and at times regular users for specific functions
System for Cross-domain Identity Management (SCIM)
System for Cross-domain Identity Management (SCIM) is a collection of application-level protocols that leverage JSON, REST, and diverse authentication methods to automate the process of data provisioning. By adopting SCIM, organizations can effortlessly create, update, or
Zero Standing Privilege (ZSP)
Whereas to have “standing privilege” means to always have access to a resource (whether they need or are using them), Zero Standing Privilege (ZSP) describes an identity’s state of having none, or zero access to a resource. Why is this an important concept? Think of it like this: if an
Zero Trust
Zero Trust is a security concept that requires all users to be authenticated and authorized before being granted access to applications, resources and data.