--- title: "EmpowerID's Jellybeans Approach and Proxied Model: Revolutionizing Identity Governance Across Diverse Systems" description: The Jellybeans approach in EmpowerID is a unique concept that enables granular control over identities and their access rights. image: https://blog.empowerid.com/hubfs/image-png-2.png --- [![empowerID-logo](https://blog.empowerid.com/hubfs/empowerID-logo.svg "empowerID-logo")](http://www.empowerid.com) **![phone](https://blog.empowerid.com/hubfs/images/phone.svg)   1-877-996-4276   **or**  +1 (614) 652-6825** [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png) ](https://www.facebook.com/220903377569) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png) ](https://www.linkedin.com/company/85780) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png) ](https://twitter.com/EmpowerID) [![Share on pinterest](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/pinterest-color.png?width=24&name=pinterest-color.png) ](http://www.youtube.com/user/empowerID) # All-In-One Identity Management and Cloud Security Emerging technologies are challenging old paradigms and unveiling new ways of approaching the security discipline that enables the right individuals to access the right resources at the right times for the right reasons. EmpowerID has embedded innovative technologies in every aspect, providing flexible and mature IAM capabilities in the cloud, on premise and in hybrid environments, addressing the mission-critical need across increasingly heterogeneous technology environments, and meeting increasingly rigorous compliance requirements. # EmpowerID's Jellybeans Approach and Proxied Model: Revolutionizing Identity Governance Across Diverse Systems Posted by [Aditya Taneja](https://blog.empowerid.com/blog-1/author/aditya-taneja) on Tue, Jun 20, 2023 ![Aditya Taneja](https://app.hubspot.com/settings/avatar/d41d8cd98f00b204e9800998ecf8427e) - [Tweet](https://twitter.com/share) In the complex world of cybersecurity, managing identities and access rights across diverse systems can be a daunting task. EmpowerID, with its innovative Jellybeans approach and Proxied Model, is revolutionizing identity governance, providing a comprehensive solution for managing identities across a wide range of on-premise and cloud systems. ## EmpowerID's Jellybeans Approach To simplify the challenge of managing thousands of diverse systems and users, let's envision all the users in an organization as JellyBeans. Hopefully making this problem a little easier to digest using this analogy (pun unintended).  In this analogy, each color of JellyBeans represents a distinct category, such as different types of employees, users, business units, customers, or even various geographic regions. Traditionally, LDAP and Virtual Directory systems allowed you to construct a hierarchy, wherein all your Users, Groups, and computers were organized within this tree-like structure. This hierarchical arrangement made it easy to remove administration roles by simply navigating through the tree.   ![](https://blog.empowerid.com/hs-fs/hubfs/image-png.png?width=572&height=283&name=image-png.png) This approach functioned adequately with straightforward on-premise systems in traditional organizations. However, with the emergence of the cloud, organizations have transitioned to various applications for their workflows, such as SAP, Salesforce, ServiceNow, Adobe, and more. Each of these applications operates on a distinct security model independent of Active Directory and LDAP. Consequently, managing the diverse collection of JellyBeans has become exceedingly challenging, as a single container can no longer accommodate all of them. So, what occurs now? ![](https://blog.empowerid.com/hs-fs/hubfs/image-png-2.png?width=548&height=288&name=image-png-2.png) They are all mixed together. The Admin Roles in database-based cloud systems often lack granularity, being too broad and limited in number. Such over-privileged admins significantly escalate your risk exposure. Nearly all modern cybersecurity attacks exploit compromised Privileged Accounts/Admins as a pivotal element in their execution. Apart from cybersecurity concerns, the privacy of your users is also completely compromised within these systems. ![](https://blog.empowerid.com/hs-fs/hubfs/image-png-3.png?width=374&height=249&name=image-png-3.png) The Jellybeans approach in EmpowerID is a unique concept that enables granular control over identities and their access rights. EmpowerID gathers all your JellyBeans, whether they reside in on-premise systems or cloud systems, and arranges them neatly in virtual containers or mini tenants. These virtual containers can represent any desired organizational structure that aligns with your preferred approach to security delegation. This virtual container model resembles the traditional LDAP or Active Directory model, allowing you to create an organizational tree and apply policies to these virtual container locations. This way, you can regulate administrative actions, enforce privacy restrictions, and restrict users and admins to their designated containers. Hence, this technology organizes your jellybeans, granting fine-grained control to admins and users over user and object visibility, precise actions, and privacy restrictions enforcement. ![](https://blog.empowerid.com/hubfs/image-png-4.png)   This approach is not limited to Azure applications but extends to a wide range of systems including user accounts, service principals, managed identities, application secrets and passwords, Exchange Online mailboxes, SharePoint Online sites, Microsoft Teams, and more. By implementing the Jellybeans approach, organizations can enhance security and efficiency, effectively managing and securing identities across diverse systems. ## The Proxied Model in EmpowerID EmpowerID's Proxied Model allows non-technical users to perform complex tasks across various systems without being given direct access. This approach reduces standing privileges, mitigating potential security risks. The Proxied Model is not limited to Azure but extends to a wide range of on-premise and cloud systems including Active Directory, Azure Active Directory, SAP S4/HANA, Salesforce.com, Amazon AWS, Google GCP, ServiceNow, LDAP, and more. Importantly, the Proxied Model also reduces the need for costly IT staff with specific knowledge and training in each of the proxied systems. This deskilling helps alleviate some of the challenges of the cybersecurity labor shortage and skills gap, making it a cost-effective solution for organizations. Read More about how Proxy Models can help enhance Identity Governance here: [Link](https://blog.empowerid.com/blog-1/enhancing-identity-governance-in-zero-trust-environments-the-power-of-proxy-models-and-workflows) #### The Intersection of Jellybeans Approach and Proxied Model The combination of the Jellybeans approach and the Proxied Model in EmpowerID provides a comprehensive solution for identity governance across diverse systems. The Jellybeans approach ensures granular control over identities, while the Proxied Model reduces standing privileges and the need for specialized IT staff. Together, they enhance security, improve efficiency, and facilitate effective identity governance. Moreover, every action taken across these diverse systems is logged, providing a detailed audit trail. This not only aids in troubleshooting and incident response but also helps organizations meet compliance requirements. #### Conclusion EmpowerID, with its Jellybeans approach and Proxied Model, is revolutionizing identity governance across diverse systems. By providing granular control over identities, reducing standing privileges, and alleviating the need for specialized IT staff, EmpowerID enhances security and facilitates effective identity governance. Whether you're looking to manage identities across a wide range of on-premise and cloud systems, EmpowerID offers a comprehensive solution that aligns with your needs. ### Talk to Our Identity Experts ### About EmpowerID EmpowerID is the all-in-one Identity Management and Cloud Security platform designed for people.  Globally managing millions of identities in diverse enterprises, EmpowerID offers comprehensive provisioning, single sign-on and access governance coupled with an industry leading user experience.  Built on a single codebase for manageability and scalability, EmpowerID ships with a powerful API, a visual workflow designer and over 400 ready-to-use workflows for rapid deployment.   [![Free Evaluation of EmpowerID](https://no-cache.hubspot.com/cta/default/174819/daebe087-5275-487d-bf53-bb1d39fb9dc4.png)](https://cta-redirect.hubspot.com/cta/redirect/174819/daebe087-5275-487d-bf53-bb1d39fb9dc4) ### Latest Posts ### Posts by category - [2-Factor (2)](https://blog.empowerid.com/blog-1/topic/2-factor) - [Access Governance (36)](https://blog.empowerid.com/blog-1/topic/access-governance) - [Active Directory (46)](https://blog.empowerid.com/blog-1/topic/active-directory) - [Attestation (4)](https://blog.empowerid.com/blog-1/topic/attestation) - [authentication (6)](https://blog.empowerid.com/blog-1/topic/authentication) - [authorization (2)](https://blog.empowerid.com/blog-1/topic/authorization) - [azure (1)](https://blog.empowerid.com/blog-1/topic/azure) - [Azure security (2)](https://blog.empowerid.com/blog-1/topic/azure-security) - [azuread (1)](https://blog.empowerid.com/blog-1/topic/azuread) - [Cisco (1)](https://blog.empowerid.com/blog-1/topic/cisco) - [Citrix (1)](https://blog.empowerid.com/blog-1/topic/citrix) - [cloud (1)](https://blog.empowerid.com/blog-1/topic/cloud) - [cloud security (28)](https://blog.empowerid.com/blog-1/topic/cloud-security) - [consumers (2)](https://blog.empowerid.com/blog-1/topic/consumers) - [Data Governance (5)](https://blog.empowerid.com/blog-1/topic/data-governance) - [dataprivacy (1)](https://blog.empowerid.com/blog-1/topic/dataprivacy) - [DirSync (1)](https://blog.empowerid.com/blog-1/topic/dirsync) - [eic (1)](https://blog.empowerid.com/blog-1/topic/eic) - [Federation (6)](https://blog.empowerid.com/blog-1/topic/federation) - [Gartner (1)](https://blog.empowerid.com/blog-1/topic/gartner) - [GDPR (2)](https://blog.empowerid.com/blog-1/topic/gdpr) - [Governance and Regulatory Compliance (4)](https://blog.empowerid.com/blog-1/topic/governance-and-regulatory-compliance) - [GRC (3)](https://blog.empowerid.com/blog-1/topic/grc) - [Group Management (12)](https://blog.empowerid.com/blog-1/topic/group-management) - [IAG (4)](https://blog.empowerid.com/blog-1/topic/iag) - [IAM (34)](https://blog.empowerid.com/blog-1/topic/iam) - [IDaaS (1)](https://blog.empowerid.com/blog-1/topic/idaas) - [Identity and Access Management (IAM) (68)](https://blog.empowerid.com/blog-1/topic/identity-and-access-management-iam) - [Identity Management (6)](https://blog.empowerid.com/blog-1/topic/identity-management) - [iga (1)](https://blog.empowerid.com/blog-1/topic/iga) - [M365 security (1)](https://blog.empowerid.com/blog-1/topic/m365-security) - [Magic Quadrant (1)](https://blog.empowerid.com/blog-1/topic/magic-quadrant) - [O365 (1)](https://blog.empowerid.com/blog-1/topic/o365) - [Office 365 (3)](https://blog.empowerid.com/blog-1/topic/office-365) - [open policy agent (1)](https://blog.empowerid.com/blog-1/topic/open-policy-agent) - [Palo Alto (1)](https://blog.empowerid.com/blog-1/topic/palo-alto) - [Password management (13)](https://blog.empowerid.com/blog-1/topic/password-management) - [Privacy and EU-US Data Transfers (1)](https://blog.empowerid.com/blog-1/topic/privacy-and-eu-us-data-transfers) - [Privacy Shield (1)](https://blog.empowerid.com/blog-1/topic/privacy-shield) - [Radius (1)](https://blog.empowerid.com/blog-1/topic/radius) - [RBAC (2)](https://blog.empowerid.com/blog-1/topic/rbac) - [Role Based Access Control (RBAC) (40)](https://blog.empowerid.com/blog-1/topic/role-based-access-control-rbac) - [SAML (4)](https://blog.empowerid.com/blog-1/topic/saml) - [Separation of Duties (2)](https://blog.empowerid.com/blog-1/topic/separation-of-duties) - [SharePoint (8)](https://blog.empowerid.com/blog-1/topic/sharepoint) - [siemens (1)](https://blog.empowerid.com/blog-1/topic/siemens) - [Single Sign-on (1)](https://blog.empowerid.com/blog-1/topic/single-sign-on) - [Single Sign-on (SSO) (26)](https://blog.empowerid.com/blog-1/topic/single-sign-on-sso) - [social media (1)](https://blog.empowerid.com/blog-1/topic/social-media) - [SSO (3)](https://blog.empowerid.com/blog-1/topic/sso) - [User provisioning (28)](https://blog.empowerid.com/blog-1/topic/user-provisioning) - [VDS (1)](https://blog.empowerid.com/blog-1/topic/vds) - [Virtual Directory (28)](https://blog.empowerid.com/blog-1/topic/virtual-directory) - [WS-Fed (2)](https://blog.empowerid.com/blog-1/topic/ws-fed) ### Subscribe via E-mail Share This Page [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png) ](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fjellybeans-approach-identity-governance%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png) ](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fjellybeans-approach-identity-governance%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png) ](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fjellybeans-approach-identity-governance%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fjellybeans-approach-identity-governance%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png) ](mailto:?subject=Check%20out%20https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fjellybeans-approach-identity-governance%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fblog.empowerid.com%2Fblog-1%2Fjellybeans-approach-identity-governance%3Futm_medium%3Dsocial%26utm_source%3Demail) ![](https://blog.empowerid.com/hubfs/images/logo-empowerid.svg) 4393 Tuller Road Dublin OH EmpowerID is a registered trademark and trade name of The Dot Net Factory, LLC. EmpowerID © 2021 EmpowerID ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Aditya Taneja", "url" : "https://blog.empowerid.com/blog-1/author/aditya-taneja" }, "dateModified" : "2023-06-20T13:31:33.073Z", "datePublished" : "2023-06-20T13:31:33.000Z", "headline" : "EmpowerID's Jellybeans Approach and Proxied Model: Revolutionizing Identity Governance Across Diverse Systems", "image" : [ "https://blog.empowerid.com/hubfs/image-png-2.png" ], "mainEntityOfPage" : { "@id" : "https://blog.empowerid.com/blog-1/jellybeans-approach-identity-governance", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.empowerid.com/hubfs/Asset%201.svg" }, "name" : "EmpowerID" } } ```