User provisioning & deprovisioning

Provisioning

User provisioning is an identity and access management (IAM) process that involves creating user accounts and giving them access to resources. User provisioning guarantees that every user has access and privileges to the data they need.

This process ensures that a user's account is created, granted access, managed, and monitored during their period with the organization. The user provisioning process starts when a user is onboarding. A new account is created for the user and managed until the time of off-boarding.

Deprovisioning

Deprovisioning is the opposite of provisioning, in that it revokes a user's access to applications, systems, and data in an organization. It is usually done when an employee leaves the organization.

Provisioning and deprovisioning occur when the user is onboarding, off-boarding, or when an employee changes roles within an organization. When a user is off-boarded, their access and associated accounts are deleted. Deprovisioning ensures that the organization's data is safe within the organization.