---
title: Access governance for data and applications
description: "EmpowerID incorporates role based access control (RBAC) into all aspects of IAM: provisioning, authentication and access governance."
image: https://blog.empowerid.com/hs-fs/file-18486671-jpg/images/access_governance_for_data_and_applications.jpg
---

[![empowerID-logo](https://blog.empowerid.com/hubfs/empowerID-logo.svg "empowerID-logo")](http://www.empowerid.com)

**![phone](https://blog.empowerid.com/hubfs/images/phone.svg)   1-877-996-4276   **or**  +1 (614) 652-6825**

[![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png) ](https://www.facebook.com/220903377569) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png) ](https://www.linkedin.com/company/85780) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png) ](https://twitter.com/EmpowerID) [![Share on pinterest](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/pinterest-color.png?width=24&name=pinterest-color.png) ](http://www.youtube.com/user/empowerID)

# All-In-One Identity Management and Cloud Security

Emerging technologies are challenging old paradigms and unveiling new ways of approaching the security discipline that enables the right individuals to access the right resources at the right times for the right reasons.

EmpowerID has embedded innovative technologies in every aspect, providing flexible and mature IAM capabilities in the cloud, on premise and in hybrid environments, addressing the mission-critical need across increasingly heterogeneous technology environments, and meeting increasingly rigorous compliance requirements.

# Access governance for data and applications

Posted by [Edward Killeen](https://blog.empowerid.com/blog-1/author/edward-killeen) on Fri, Nov 09, 2012

- [Tweet](https://twitter.com/share)

![Access governance for data and applications](https://blog.empowerid.com/hs-fs/file-18486671-jpg/images/access_governance_for_data_and_applications.jpg)Reading an article by Earl Perkins titled [Data Meets Applications in Identity and Access Governance](http://blogs.gartner.com/earl-perkins/2012/05/07/data-meets-applications-in-identity-and-access-governance/), I was struck by the distinction he makes between application and data access governance.  From an IAM professional's point of view, they should be one and the same thing...access to resources for their users.

But, apparently, our competitors haven't always thought that way.  He talks about how IAM suite vendors (we are one) are squeezing out point solutions by buying companies and product lines to integrate data access governance into traditional IAM.  EmpowerID is one step ahead of that curve (at least one step!).

EmpowerID's platform incorporates role based access control (RBAC) into all aspects of IAM: provisioning, authentication, synchronization, and, yes, access governance.  This ability to manage any IAM workflow based on roles or even attributes (ABAC) and integrate them into any IAM process is what makes our access governance abilities unique.

We don't have to distinguish between data and application access when granting privileges.  Either are simply resources to empowerID.  The same role structure, the same access request workflows, the same user interfaces apply whether asking for access to Salesforce.com or that folder in the Windows file system, or the shared Exchange mailbox. 

If your role has access, you have access.  If you want to request access, it is the same UI and a resource-appopriate approval process.

For [data access governance](http://www.empowerid.com/products/filesharemanager), we have taken it one step further.  Most solutions offer you one of two ways to request access: 1) request access to a file or folder, or 2) request access to the group that is granting access.  EmpowerID adds the option of requesting access to a role.

No two users think of this process in the same way.  Those who prefer option 1 think of it as, "I need access to that data", those who prefer option 2 think, "what do I need to get access to data", and the third think, "who gets access to that data."

An access governance solution should be able to provide all three options (within limits of course) to satisfy the left brain, the right brain and the all brain thinkers.  Not just for data but application access as well. 

I dislike square peg round hole situations.  If you consider your access governance and IAM solution to be a peg, make it malleable to fit your own businesss situations, processes and policies.  Let us show you a personalized demonstration to see how empowerID can fit into your business and improve access governance.

[![Schedule an empowerID demo for better access governance!](https://no-cache.hubspot.com/cta/default/174819/2eda6622-ed8b-4168-8f28-a71d239bfcf0.png)](https://cta-redirect.hubspot.com/cta/redirect/174819/2eda6622-ed8b-4168-8f28-a71d239bfcf0)

 Tags: [Role Based Access Control (RBAC)](https://blog.empowerid.com/blog-1/topic/role-based-access-control-rbac), [Identity and Access Management (IAM)](https://blog.empowerid.com/blog-1/topic/identity-and-access-management-iam)

### About EmpowerID

EmpowerID is the all-in-one Identity Management and Cloud Security platform designed for people.  Globally managing millions of identities in diverse enterprises, EmpowerID offers comprehensive provisioning, single sign-on and access governance coupled with an industry leading user experience. 

Built on a single codebase for manageability and scalability, EmpowerID ships with a powerful API, a visual workflow designer and over 400 ready-to-use workflows for rapid deployment.

 

[![Free Evaluation of EmpowerID](https://no-cache.hubspot.com/cta/default/174819/daebe087-5275-487d-bf53-bb1d39fb9dc4.png)](https://cta-redirect.hubspot.com/cta/redirect/174819/daebe087-5275-487d-bf53-bb1d39fb9dc4)

### Latest Posts

### Posts by category

- [2-Factor (2)](https://blog.empowerid.com/blog-1/topic/2-factor)
- [Access Governance (36)](https://blog.empowerid.com/blog-1/topic/access-governance)
- [Active Directory (46)](https://blog.empowerid.com/blog-1/topic/active-directory)
- [Attestation (4)](https://blog.empowerid.com/blog-1/topic/attestation)
- [authentication (6)](https://blog.empowerid.com/blog-1/topic/authentication)
- [authorization (2)](https://blog.empowerid.com/blog-1/topic/authorization)
- [azure (1)](https://blog.empowerid.com/blog-1/topic/azure)
- [Azure security (2)](https://blog.empowerid.com/blog-1/topic/azure-security)
- [azuread (1)](https://blog.empowerid.com/blog-1/topic/azuread)
- [Cisco (1)](https://blog.empowerid.com/blog-1/topic/cisco)
- [Citrix (1)](https://blog.empowerid.com/blog-1/topic/citrix)
- [cloud (1)](https://blog.empowerid.com/blog-1/topic/cloud)
- [cloud security (28)](https://blog.empowerid.com/blog-1/topic/cloud-security)
- [consumers (2)](https://blog.empowerid.com/blog-1/topic/consumers)
- [Data Governance (5)](https://blog.empowerid.com/blog-1/topic/data-governance)
- [dataprivacy (1)](https://blog.empowerid.com/blog-1/topic/dataprivacy)
- [DirSync (1)](https://blog.empowerid.com/blog-1/topic/dirsync)
- [eic (1)](https://blog.empowerid.com/blog-1/topic/eic)
- [Federation (6)](https://blog.empowerid.com/blog-1/topic/federation)
- [Gartner (1)](https://blog.empowerid.com/blog-1/topic/gartner)
- [GDPR (2)](https://blog.empowerid.com/blog-1/topic/gdpr)
- [Governance and Regulatory Compliance (4)](https://blog.empowerid.com/blog-1/topic/governance-and-regulatory-compliance)
- [GRC (3)](https://blog.empowerid.com/blog-1/topic/grc)
- [Group Management (12)](https://blog.empowerid.com/blog-1/topic/group-management)
- [IAG (4)](https://blog.empowerid.com/blog-1/topic/iag)
- [IAM (34)](https://blog.empowerid.com/blog-1/topic/iam)
- [IDaaS (1)](https://blog.empowerid.com/blog-1/topic/idaas)
- [Identity and Access Management (IAM) (68)](https://blog.empowerid.com/blog-1/topic/identity-and-access-management-iam)
- [Identity Management (6)](https://blog.empowerid.com/blog-1/topic/identity-management)
- [iga (1)](https://blog.empowerid.com/blog-1/topic/iga)
- [M365 security (1)](https://blog.empowerid.com/blog-1/topic/m365-security)
- [Magic Quadrant (1)](https://blog.empowerid.com/blog-1/topic/magic-quadrant)
- [O365 (1)](https://blog.empowerid.com/blog-1/topic/o365)
- [Office 365 (3)](https://blog.empowerid.com/blog-1/topic/office-365)
- [open policy agent (1)](https://blog.empowerid.com/blog-1/topic/open-policy-agent)
- [Palo Alto (1)](https://blog.empowerid.com/blog-1/topic/palo-alto)
- [Password management (13)](https://blog.empowerid.com/blog-1/topic/password-management)
- [Privacy and EU-US Data Transfers (1)](https://blog.empowerid.com/blog-1/topic/privacy-and-eu-us-data-transfers)
- [Privacy Shield (1)](https://blog.empowerid.com/blog-1/topic/privacy-shield)
- [Radius (1)](https://blog.empowerid.com/blog-1/topic/radius)
- [RBAC (2)](https://blog.empowerid.com/blog-1/topic/rbac)
- [Role Based Access Control (RBAC) (40)](https://blog.empowerid.com/blog-1/topic/role-based-access-control-rbac)
- [SAML (4)](https://blog.empowerid.com/blog-1/topic/saml)
- [Separation of Duties (2)](https://blog.empowerid.com/blog-1/topic/separation-of-duties)
- [SharePoint (8)](https://blog.empowerid.com/blog-1/topic/sharepoint)
- [siemens (1)](https://blog.empowerid.com/blog-1/topic/siemens)
- [Single Sign-on (1)](https://blog.empowerid.com/blog-1/topic/single-sign-on)
- [Single Sign-on (SSO) (26)](https://blog.empowerid.com/blog-1/topic/single-sign-on-sso)
- [social media (1)](https://blog.empowerid.com/blog-1/topic/social-media)
- [SSO (3)](https://blog.empowerid.com/blog-1/topic/sso)
- [User provisioning (28)](https://blog.empowerid.com/blog-1/topic/user-provisioning)
- [VDS (1)](https://blog.empowerid.com/blog-1/topic/vds)
- [Virtual Directory (28)](https://blog.empowerid.com/blog-1/topic/virtual-directory)
- [WS-Fed (2)](https://blog.empowerid.com/blog-1/topic/ws-fed)

### Subscribe via E-mail

Share This Page

[![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png) ](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fbid%2F242218%2FAccess-governance-for-data-and-applications%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png) ](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fbid%2F242218%2FAccess-governance-for-data-and-applications%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png) ](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fbid%2F242218%2FAccess-governance-for-data-and-applications%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fbid%2F242218%2FAccess-governance-for-data-and-applications%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png) ](mailto:?subject=Check%20out%20https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fbid%2F242218%2FAccess-governance-for-data-and-applications%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fbid%2F242218%2FAccess-governance-for-data-and-applications%3Futm_medium%3Dsocial%26utm_source%3Demail)

![](https://blog.empowerid.com/hubfs/images/logo-empowerid.svg)

4393 Tuller Road  
Dublin OH

EmpowerID is a registered trademark and  
trade name of The Dot Net Factory, LLC.  
EmpowerID

© 2021 EmpowerID

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Edward Killeen",
    "url" : "https://blog.empowerid.com/blog-1/author/edward-killeen"
  },
  "datePublished" : "2012-11-09T17:20:00.000Z",
  "headline" : "Access governance for data and applications",
  "image" : [ "https://blog.empowerid.com/hs-fs/file-18486671-jpg/images/access_governance_for_data_and_applications.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://blog.empowerid.com/blog-1/bid/242218/Access-governance-for-data-and-applications",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.empowerid.com/hubfs/Asset%201.svg"
    },
    "name" : "EmpowerID"
  }
}
```