Activate Identity Licence Types

Activate uses a standard set of Identity Licence Types to reflect the different ways identities are managed within an organisation.

Each Managed Identity is assigned a single Activate Identity Licence Type based on the level of lifecycle management, governance and access that applies to that identity.

An identity is not counted multiple times simply because it has access to multiple systems, applications or services.

A Managed Identity represents a human or non-human identity that is within the agreed scope of the purchased Activate solution subscription and is available for Activate to manage.

An identity may have multiple accounts across different systems and applications. These accounts form part of the identity and do not create additional Identity Licences where the identity has access to multiple systems.

For example, an employee may have accounts in Active Directory, Microsoft 365 and other business applications. Activate treats these accounts as belonging to the employee's single Workforce Identity.

Non-Human Identities are different because they represent a separate non-human identity and therefore have their own Identity Licence.

The standard Activate Identity Licence Types are:

A Workforce Identity is a human individual who requires full identity lifecycle management across the systems and applications they need to perform their role.

This is the standard Identity Licence Type for people who are part of, or operate in a similar way to, an organisation's core workforce.

Workforce Identities may include:

A Workforce Identity may have access provisioned and removed across multiple systems and applications as the person's role changes.

The accounts associated with that person form part of their Workforce Identity and do not create additional Workforce Identity Licences.

A Custom or External Identity is a person who requires a more limited or specifically defined level of access than a Workforce Identity.

These identities typically require access to a smaller number of systems or services and may have a simpler lifecycle.

Examples may include:

Custom or External Identities may still have automated provisioning, deprovisioning and governance applied to them, but generally across a more limited scope than a Workforce Identity.

A Managed Only Identity is a person that an organisation needs Activate to know about, govern or manage, but who does not require full workforce-level access.

These identities generally have limited access and require only minor lifecycle orchestration.

Examples may include:

Depending on the customer's configuration, a Managed Only Identity may be able to sign in to the Activate portal with read-only access to permitted information, such as contact details.

They cannot normally submit access requests, perform tasks or access information that requires a higher level of permission.

A Non-Human Identity is an identity used by a system, application, service or automated process.

Examples include:

Non-Human Identities are separate identities and consume their own Non-Human Identity Licence.

Where appropriate, a human identity is recorded as the owner of a Non-Human Identity. This allows Activate to apply ownership, governance, attestation and lifecycle rules to that Non-Human Identity.

For example, when an employee leaves an organisation, Activate can identify Non-Human Identities owned by that person and apply the organisation's business rules to review, transfer, disable or otherwise manage those identities.

Each Managed Identity is assigned one Activate Identity Licence Type at any point in time.

The Identity Licence Type reflects how Activate is configured to manage that identity.

For example:

If the way an identity is managed changes, its Identity Licence Type may also change.

For licensing purposes, the identity is counted under the Identity Licence Type assigned to it at the applicable reporting date.

There are three separate parts to consider when determining an Activate subscription:

Some Add-ons may have their own licensing rules based on the capability being provided. Purchasing or applying an Add-on does not automatically change the underlying Identity Licence Type of a Managed Identity.

Your Activate quote or subscription agreement identifies the Packages, Identity Licence Types, Add-ons and quantities that apply to your organisation.

Activate automatically measures the number of Managed Identities within each applicable Identity Licence Type.

These counts are used to provide licence reporting and, depending on the subscription arrangement, to determine monthly or annual subscription charges and to support the annual licence review.

For more information, see How Activate Licence Counts Are Calculated.