Role Mining

Role mining analyzes actual access patterns across your organization to discover implicit roles. The algorithm clusters users with similar entitlement profiles, suggests role definitions that would cover each cluster with least privilege, and estimates the number of individual grants that would be eliminated by adopting the proposed roles.

Impact simulation shows what would change if a proposed role were activated -- which users would gain or lose access, and whether any SoD policies would be violated.

Key Configuration

• Minimum cluster size for role suggestion
• Entitlement similarity threshold
• Excluded accounts (service accounts, break-glass)
• Analysis window (days of access history)