Identity Overview

The Identify category is a category for Identity related assets.
They include:

• Users - Assets of user objects from different sources.
• Groups - Assets to describe users' groups (usually for permissions purposes). Fetched by adapters such as Monday, Active Directory, AWS, Microsoft Entra ID (Azure AD)​, etc.
• Roles - Assets describing roles that can be attached to other services to influence permissions. Fetched by adapters such as Monday, AWS.
• Organizational Units - Assets referring to distinct divisions or departments within a larger organization, typically with their own specific responsibilities, goals, and management structures. Organizational Units are often used to organize and streamline operations within complex organizations. Fetched by adapters such as Active Directory and Microsoft Entra ID.
• Accounts - Accounts related to different sources. Fetched by adapters such as Monday, AWS, Google Cloud Platform (GCP).
• Certificates - Assets related to digital documents issued by trusted entities, such as certificate authorities (CAs), to authenticate the identity of individuals, organizations, or entities in online communications. They contain cryptographic keys and information verifying the holder's identity, enabling secure and encrypted connections over the internet. Certificates are essential for establishing trust, ensuring data confidentiality, and protecting against unauthorized access and tampering.
• Permissions - User related permissions that were discovered from SaaS applications. Fetched by adapters such as Okta, Microsoft EntraID, AWS and more.
• Job Titles - Assets related to job titles. Fetched by adapters such as Okta.
• Managed Identities - A Managed Identity is a specific kind of User that can be managed via the Axonius platform if you choose. A User encompasses any data that indicates an individual’s presence, such as the records and information that CrowdStrike EDR keeps on the people it tracks. From a governance perspective, in the Crowdstrike example there are no lifecycle actions associated with its users, such as suspension when individuals leave the company. Managed Identities help reduce clutter by filtering out these Users and focusing on the information that is relevant for governance.
  add note: maybe add next to all assets here on this page used for IDM, and rules and activities
• Profiles - A set of entitlements/permissions that can be granted to a managed identity.
• Rules - A set of conditions that determine what identities receive which entitlements/permissions.
• Justifications - Why a specific entitlement/permission was granted or not granted.

Each Identity type is presented on its own page.

• All the Assets pages have simliar capabilites as described in Assets Page.
• Learn about Working with Assets

Association Fields

Association fields pull data from one asset to display in an associated asset. The following Association fields exist between the asset entities in this section:
AD Group Members - This field displays the AD users who belong to this group. For each user, the field shows their username, email, Internal User ID, and SID. You can also choose to display just one of these parameters.