Identity and Access Management

Description

An organization rarely fails at granting access. It fails at taking it away, at checking whether two permissions should never sit with the same person, and at noticing that an administrator's account has stood ready, unused, for months. This course teaches identity and access management as the discipline that catches all three: build a directory that reliably knows who should have access, design roles from what people actually do instead of guessing from job titles, keep dangerous permission combinations apart, automate access as people join, move and leave, and bring the most powerful accounts under time-bound, audited control.

What you will be able to do

• Build a directory from a source of truth, link every application account to a person or a named owner, and set authentication strength by the risk of what a stolen login could do.
• Compare role-based, attribute-based and relationship-based access control, and know when each one fits.
• Mine roles from the access people actually hold, measure how clean each role is, and find separation-of-duties violations before they are exploited.
• Judge whether an access review campaign is a real check or a rubber stamp, from the data it leaves behind.
• Turn HR events into exact account operations, measure deprovisioning speed in account-days of exposure, and reconcile drift that automation alone never catches.
• Replace standing administrator access with just-in-time elevation, bring service accounts under real ownership, and audit privileged activity against what was actually approved.

How the course is taught

Every lesson follows the same rhythm: a real situation, a precise explanation with a plain-words summary, a code demo you run in Google Colab, exercises with hints and answers, and the key points to remember. All the work happens on one fictional company's real accounts and applications, the outdoor retailer Trailhead Outfitters, continuing directly from the findings of Cybersecurity Fundamentals: the same leaver whose account stayed active, the same excess permissions, now traced to their root cause and fixed.

Every number in the lessons comes from actually running the code on the course's own data, not from a diagram. Identity standards and products are explained at the level of their structure and purpose, so you can design and evaluate real systems without needing an account, a tenant or a paid identity product.

What is included

Short lessons that move from identity foundations, through role design and access governance, identity lifecycle automation, and privileged access management, followed by a guided project in which you redesign a company's identity and access management from the ground up. You also get the fictional company's staff and account lists, application accounts across six systems, entitlements, separation-of-duties rules, a past access review campaign, access requests, a month of HR changes, admin sessions, service accounts and an admin change log, starter and solution notebooks with self-checks for the project, and a quiz drawn from a question bank at the end of every module.

Who it is for

This course is for learners who finished Cybersecurity Fundamentals and want to specialise in identity, one of the most in-demand security disciplines; for IT administrators who manage accounts, groups and application access every day; and for security, audit and compliance staff who review access and need to judge whether it is really under control. If you have ever wondered why an account nobody remembers granting is still active, this course gives you the method to find out, at scale, with numbers instead of guesses. It is the third course of the Cybersecurity path and builds directly on Cybersecurity Fundamentals. Enroll now and learn to make sure the right people, and only the right people, have access.