Glossary

Glossary terms

• User - An entity which can receive, hold, and be stripped of entitlements
• Application - A SaaS infrastructure or an application that Entitle can integrate with, e.g. AWS, Salesforce
• Integration - A specific instance or integration with an "Application". Integration includes the configuration needed to connect Entitle including credentials, as well as all the user's permissions information
• Resource - An entity within an "Integration" to which a user can gain access via an "Entitlement", e.g. DB table, group of users
• Role - A level of access to which a "User" is entitled to a "Resource", e.g. Read, Admin
• Permission, or Entitlement - The right a user has to access a "Resource" of an "Integration" via a specific "Role"
• Bundle - A set of entitlements that can be assigned or revoked together by Entitle
• Tag - A metadata element applied to an Entitle entity such as a resource that helps you identify and classify the entity based on settings that are relevant to your organization. It is a single value element even if originally fetched from a key-value pair. Entitle can retrieve tags from integrations and actively modify its internally managed tags.

GitHub example

In the example above, the glossary terms are represented as follows:

• Application - GitHub (Git repository management service)
• Integration - The integration here would be the connection to the "ACME" organization in GitHub
• Resource - There are two resources: Repository A and Repository B
• Role - There are two roles: Admin and Maintainer
• Entitlement - An example of Entitlement would be Repository A Admin, or Repository B Maintainer

User Access Review terms

• User Access Review (UAR) - Review authorizations and permissions across the organization. Standard for securing logical access rights and an integral part of any organization’s Identity and Access Management (IAM) strategy
• (Access) Review - An implementation of a user access review process for a specific part of the organization, defined in a template. Conducted periodically
• (Review) Template - The definition of a review, is a combination of reviewed applications and specific groups of users to be reviewed. Templates can be reused, each instance is a review
• Reporter - Access review reviewer. One of the application or organizational unit managers reviews users' permissions as a part of a review