Identity and access have a life cycle that begins with provisioning of an account, goes through a series of periodic reviews to ensure the account is still necessary, and finally results in the account being deprovisioned.
Provisioning
Provisioning pertains to the creation of user objects or accounts.
Identity and access provisioning also pertains to system accounts, which are usually associated with services and automated agents and oftentimes require privileged access.
User Access Review
The purpose of these user access reviews is to ensure we don’t have any active accounts that are no longer needed.
剩余内容请看本人公众号debugeeker, 链接为CISSP考试指南笔记:5.7 身份和访问管理的生命周期