# Access Control Administrator

*/JobTypes/Access_Control_Administrator*

## Neighborhood

### Related (delivered by)

- [Card Program Operations](/Processes/Card_Program_Operations) — delivered by · Processes
- [Manage safety, security, and access to sites](/Processes/Manage_safety,_security,_and_access_to_sites) — delivered by · Processes
- [Determine management of gates (by zone or by gate)](/Processes/Determine_management_of_gates_(by_zone_or_by_gate)) — delivered by · Processes

### Related (staff)

- [Facilities and Security](/Departments/Facilities_and_Security) — staff · Departments
- [Security](/Departments/Security) — staff · Departments
- [Physical Security](/Departments/Physical_Security) — staff · Departments

### Who staffs this

- [Safety and Security](/Departments/Safety_and_Security) — staffs · Departments

### Perform

- [Provision and Deprovision User Accounts](/Tasks/Provision_and_Deprovision_User_Accounts) — perform · Tasks
- [Maintain Access Control Groups](/Tasks/Maintain_Access_Control_Groups) — perform · Tasks
- [Maintain privileges register](/Tasks/Maintain_privileges_register) — perform · Tasks
- [Run Access Certification Campaigns](/Tasks/Run_Access_Certification_Campaigns) — perform · Tasks
- [Disable Access for Terminated Employees Within SLA](/Tasks/Disable_Access_for_Terminated_Employees_Within_SLA) — perform · Tasks
- [Document Access Administration Procedures](/Tasks/Document_Access_Administration_Procedures) — perform · Tasks
- [Process Access Request Tickets Against Approval Policies](/Tasks/Process_Access_Request_Tickets_Against_Approval_Policies) — perform · Tasks
- [Support Audit Evidence Requests on Access Controls](/Tasks/Support_Audit_Evidence_Requests_on_Access_Controls) — perform · Tasks
- [Configure security settings or access permissions for groups or individuals.](/Tasks/Configure_security_settings_or_access_permissions_for_groups_or_individuals.) — perform · Tasks
- [Assign Role Based Entitlements](/Tasks/Assign_Role_Based_Entitlements) — perform · Tasks
- [Deprovision Departing Users](/Tasks/Deprovision_Departing_Users) — perform · Tasks
- [Enforce Least Privilege](/Tasks/Enforce_Least_Privilege) — perform · Tasks
- [Maintain Access Records](/Tasks/Maintain_Access_Records) — perform · Tasks
- [Provision User Access](/Tasks/Provision_User_Access) — perform · Tasks
- [Reset Account Credentials](/Tasks/Reset_Account_Credentials) — perform · Tasks
- [Review Access Entitlement Requests](/Tasks/Review_Access_Entitlement_Requests) — perform · Tasks
- [Investigate Access Anomalies](/Tasks/Investigate_Access_Anomalies) — perform · Tasks
- [Deprovision Terminated User Accounts](/Tasks/Deprovision_Terminated_User_Accounts) — perform · Tasks

### Required skills

- [Procedure Documentation](/Skills/Procedure_Documentation) — requires skill · Skills
- [Directory Services Administration](/Skills/Directory_Services_Administration) — requires skill · Skills
- [Audit Evidence Preparation](/Skills/Audit_Evidence_Preparation) — requires skill · Skills
- [Ticket Queue Management](/Skills/Ticket_Queue_Management) — requires skill · Skills
- [Access Documentation](/Skills/Access_Documentation) — requires skill · Skills
- [Identity Provisioning](/Skills/Identity_Provisioning) — requires skill · Skills
- [Request Triage](/Skills/Request_Triage) — requires skill · Skills
- [Role Based Access Configuration](/Skills/Role_Based_Access_Configuration) — requires skill · Skills
- [Access Request Processing](/Skills/Access_Request_Processing) — requires skill · Skills
- [Identity Administration](/Skills/Identity_Administration) — requires skill · Skills
- [Policy Enforcement](/Skills/Policy_Enforcement) — requires skill · Skills
- [Troubleshooting](/Skills/Troubleshooting) — requires skill · Skills

### Required knowledge

- [Joiner Mover Leaver Processes](/Knowledge/Joiner_Mover_Leaver_Processes) — requires knowledge · Knowledge
- [Identity and Access Management Concepts](/Knowledge/Identity_and_Access_Management_Concepts) — requires knowledge · Knowledge
- [IT General Controls and Audit Requirements](/Knowledge/IT_General_Controls_and_Audit_Requirements) — requires knowledge · Knowledge
- [Segregation of Duties Principles](/Knowledge/Segregation_of_Duties_Principles) — requires knowledge · Knowledge
- [Role Based Access Control Models](/Knowledge/Role_Based_Access_Control_Models) — requires knowledge · Knowledge
- [Role-Based Access Control](/Knowledge/Role-Based_Access_Control) — requires knowledge · Knowledge
- [Authentication Systems](/Knowledge/Authentication_Systems) — requires knowledge · Knowledge
- [Identity And Access Management](/Knowledge/Identity_And_Access_Management) — requires knowledge · Knowledge
- [Least Privilege Principles](/Knowledge/Least_Privilege_Principles) — requires knowledge · Knowledge
- [Security Policy](/Knowledge/Security_Policy) — requires knowledge · Knowledge
- [Directory Services](/Knowledge/Directory_Services) — requires knowledge · Knowledge
- [Information Security Policy](/Knowledge/Information_Security_Policy) — requires knowledge · Knowledge

### Requires ability

- [Time Management](/Ability/Time_Management) — requires ability · Ability
- [Attention to Detail](/Ability/Attention_to_Detail) — requires ability · Ability
- [Problem Sensitivity](/Ability/Problem_Sensitivity) — requires ability · Ability
- [Information Ordering](/Ability/Information_Ordering) — requires ability · Ability
- [Deductive Reasoning](/Ability/Deductive_Reasoning) — requires ability · Ability
- [Selective Attention](/Ability/Selective_Attention) — requires ability · Ability

### Engage in

- [Process Access Request Tickets Against Approval Policies](/Activities/Process_Access_Request_Tickets_Against_Approval_Policies) — engage in · Activities
- [Disable Access for Terminated Employees Within SLA](/Activities/Disable_Access_for_Terminated_Employees_Within_SLA) — engage in · Activities
- [Provision and Deprovision User Accounts Across Systems](/Activities/Provision_and_Deprovision_User_Accounts_Across_Systems) — engage in · Activities
- [Deprovision Departing Users](/Activities/Deprovision_Departing_Users) — engage in · Activities
- [Enforce Least Privilege](/Activities/Enforce_Least_Privilege) — engage in · Activities
- [Provision User Access](/Activities/Provision_User_Access) — engage in · Activities

### Uses software

- [Microsoft Entra ID](/Software/Microsoft_Entra_ID) — uses software · Software
- [CyberArk](/Software/CyberArk) — uses software · Software
- [Azure Entra ID](/Software/Azure_Entra_ID) — uses software · Software
- [Microsoft Active Directory](/Software/Microsoft_Active_Directory) — uses software · Software
- [SailPoint](/Software/SailPoint) — uses software · Software
- [SailPoint IdentityIQ](/Software/SailPoint_IdentityIQ) — uses software · Software
- [Active Directory](/Software/Active_Directory) — uses software · Software
- [ServiceNow](/Software/ServiceNow) — uses software · Software
- [Okta](/Software/Okta) — uses software · Software

### Type of

- [Information Security Analysts](/Occupations/Information_Security_Analysts) — type of · Occupations

### Problems this exposes

- [segregation-of-duties conflicts emerging from accumulated role grants](/Problems/segregation-of-duties_conflicts_emerging_from_accumulated_role_grants) — exposes problem · Problems
- [access-recertification campaigns rubber-stamped by managers who don't know the entitlements](/Problems/access-recertification_campaigns_rubber-stamped_by_managers_who_don't_know_the_entitlements) — exposes problem · Problems
- [orphaned accounts and standing privilege from role changes never revoked](/Problems/orphaned_accounts_and_standing_privilege_from_role_changes_never_revoked) — exposes problem · Problems
- [reconciling badge/physical-access systems with logical IAM entitlements](/Problems/reconciling_badge%2Fphysical-access_systems_with_logical_IAM_entitlements) — exposes problem · Problems