Authority Mining›Simulation
Joe Cordoba
Security Architect

Simulation

Simulate the impact of promoting a candidate to Business Authority before approval.

Candidate
Finance Data Steward
Environment
Production
Population
All Identities
Business Unit
Finance
Simulation Name
Finance Data Steward – Prod
Impact Analysis
Risk & Policy
Runtime Impact
Coverage Delta
Summary
Identities
+128 Added
-12 Removed
Business Authorities
+1 Added
-0 Removed
Applications / APIs
+14 Added
-2 Removed
AI Agents
+2 Added
-2 Removed
Permissions
+84 Added
-15 Removed
IntentGrants
+132 Added
-15 Removed

Current State vs. Proposed State

DimensionCurrent StateProposed StateChange
Identities in Scope1,2481,364+116 (+9.3%)
Business Authorities4546+1 (+2.2%)
Applications / APIs7284+12 (+16.7%)
AI Agents1113+2 (+18.2%)
Permissions1,3421,411+69 (+5.1%)
IntentGrants (Daily Avg.)1,9852,117+132 (+6.6%)

Change Breakdown

116
Net Identity Change
Added128 (91%)
Removed12 (9%)
View detailed identity changes →

Impact Timeline (Preview)

What will happen after promotion.
1. Promote Candidate

Candidate promoted to Business Authority.

2. Update Birthright

Birthright rules updated with new authority.

3. Generate IntentGrants

JIT IntentGrants generated for impacted identities.

4. Enforce at Runtime

PEP gateways enforce new authorization in real time.

5. Monitor & Review

Monitor usage and review for continuous assurance.

Risk Summary

Overall risk score will change as follows.
Risk Score
Current
36
Medium
Proposed
42
Medium
Change +6 (↑ 16.7%)
Top Risk Areas Affected
SoD Violations2 → 3
High Risk Permissions7 → 9
Policy Violations1 → 1 —
Access SprawlMedium → High
Data ExposureMedium → Medium —

Simulation Details

Created ByJoe Cordoba
Created OnMay 20, 2025 02:15 AM
EnvironmentProduction
PopulationAll Identities (Finance)
Source CandidateFinance Data Steward
NotesQuarterly review simulation before approval.
View full simulation activity →