How to Identify Roles for an Organization using Top-Down Analysis - RBAC Methods

Now that you have gotten a basic understanding of RBAC, let’s talk about how we identify roles and begin to not only understand the organization but start to build the building blocks using the RBAC model for an organization.
There are two primary methods to identifying roles or what the IAM industry calls “role mining”. One method is the top-down approach and the other is the bottom-up approach.
Resources:
• www.idenhaus.com/rbac-approac...
Follow Andrew on Social media:
Twitter: / allthingsiam
Website: Coming soon!!
My other appearances:
CSNP IAM 101: • Identity and Access Ma...
Active Listening: • Sit Down, Shut Up, and...
Talking IAM with StudioSec: • Andrew Chanthaphone, F...
Security Happy Hour with CyberWarrior Studios: • Security Happy Hour: I...
✔ Subscribe for more videos on Identity and Access Management:
/ @allthingsiam
Feel free to leave a comment on suggested topics you want for me to discuss in future videos.
Equipment Used:
Camera: iPhone 13 Pro
Video Editing: Camtasia 2021
Click here for a free trial: techsmith.z6rjha.net/P0bnNz
Images and videos provided by Canva
Try it for free: bit.ly/3Eaq0B0
Music Epidemic Sound
Try it for free: bit.ly/2VM6rxK
Disclaimer: Links included in this description might be affiliate links. If you purchase a product or service with the links, I provide I may receive a small commission. There is no additional charge to you! Thank you for supporting my channel, so I can continue to provide you with free content!

[@saephon3988]

I am so glad I stumbled on your channel. You have a very eloquent knack for explaining concepts fully, without being convoluted or talking down to people trying to learn. I actually have an interview for an IAM Analyst position next week and I'm brushing up on many of the concepts covered here. Great stuff!

[@AllThingsIAM]

Thank you sir for the comments. I am so happy you got some great value from my videos, that is my intent. I try my best to keep my explanations as simple as possible that anyone can understand. Best of luck in your interview next week. If you have any questions that you want clarification on or some ways to answer using your own experience, feel free to email me [e-mail], I'll be happy to help you the best I can. We need awesome people like yourself in the field.

[@saephon3988]

@@AllThingsIAM First interview went great!! Its actually a lot less hands-on provisioning than I expected, and more about defining IAM goals, roles, and process maturation. So once again, thank you for helping me get into that mindset. And the wiki from David Doret is AWESOME.
I thought this position might be over my head but now I'm feeling more confident.

[@manuelb.4107]

Thank you for another informative video. I look forward to the video on "Bottom-Up" Analysis.

[@craigheard2504]

Great information and real world scenarios Andrew. It’s exactly what I am looking. Any book recommendations or courses that combine all of the information from you or other sources, please let me know. You are a great mentor.

[@SuperAllstar64]

When joining a company don’t they have roles already , why we have to start from scratch

[@AllThingsIAM]

They can have established roles, however, they might need to refine them. However, you be surprised at how many established companies don’t have roles defined. Just like many companies who don’t use MFA. You think they do, but many still don’t enforce MFA.