Periodically review the appropriateness and necessity of user identities
Employee changes, such as onboarding, offboarding, and role transfers, require continuous adjustments to cloud identities and their permissions. Regularly review cloud user identities to promptly detect and resolve issues caused by these changes. Common issues include idle identities and excessive permissions. This process also ensures that security control policies, such as enabling Multi-Factor Authentication (MFA), are consistently applied.
Priority
Medium
Not recommended practices
Never reviewing the validity and necessity of cloud user identities.
Relying on manual reviews. This approach leads to high operational costs and inconsistent review standards.
Implementation guide
You can use the governance check feature of Cloud Governance Center to regularly review and manage user identities.
Before you use Cloud Governance Center for the first time, activate Cloud Governance Center. This service is free. Cloud Governance Center runs a daily scan to check your cloud governance maturity. Regularly review the scan data and follow the remediation guide to address any threats. For user identities, focus on check items for scenarios such as identity management and granular access control. For more information about check items, see Supported check items (Model 2.0).
Subscribe to governance check reports to regularly receive the latest check results. This lets you view and handle threats promptly. For more information, see Subscribe to governance reports.