Activate Identity License Types

activate uses a standard set of identity license types to reflect the different ways identities are managed within an organisation each managed identity is assigned a single activate identity license type based on the level of lifecycle management, governance and access that applies to that identity an identity is not counted multiple times simply because it has access to multiple systems, applications or services what is a managed identity? a managed identity represents a human or non human identity that is within the agreed scope of the purchased activate solution subscription and is available for activate to manage an identity may have multiple accounts across different systems and applications these accounts form part of the identity and do not create additional identity licenses where the identity has access to multiple systems for example, an employee may have accounts in active directory, microsoft 365 and other business applications activate treats these accounts as belonging to the employee's single workforce identity non human identities are different because they represent a separate non human identity and therefore have their own identity license the standard activate identity license types are workforce identity custom or external identity managed only identity non human identity (machine, service and ai) workforce identity a workforce identity is a human individual who requires full identity lifecycle management across the systems and applications they need to perform their role this is the standard identity license type for people who are part of, or operate in a similar way to, an organisation's core workforce workforce identities may include employees contractors with broad organisational access long term consultants other users requiring full lifecycle management a workforce identity may have access provisioned and removed across multiple systems and applications as the person's role changes the accounts associated with that person form part of their workforce identity and do not create additional workforce identity licenses custom or external identity a custom or external identity is a person who requires a more limited or specifically defined level of access than a workforce identity these identities typically require access to a smaller number of systems or services and may have a simpler lifecycle examples may include partners vendors temporary or project based workers external collaborators seasonal workers retail or franchise users custom or external identities may still have automated provisioning, deprovisioning and governance applied to them, but generally across a more limited scope than a workforce identity managed only identity a managed only identity is a person that an organisation needs activate to know about, govern or manage, but who does not require full workforce level access these identities generally have limited access and require only minor lifecycle orchestration examples may include cleaners requiring building access or people requiring physical security access only family members or affiliated individuals requiring limited organisational access people requiring access to a specific operational service other low interaction identity populations depending on the customer's configuration, a managed only identity may be able to sign in to the activate portal with read only access to permitted information, such as contact details they cannot normally submit access requests, perform tasks or access information that requires a higher level of permission non human identity (machine, service and ai) a non human identity is an identity used by a system, application, service or automated process examples include service accounts api identities integration accounts automation bots (ai agents) background processes non human identities are separate identities and consume their own non human identity license where appropriate, a human identity is recorded as the owner of a non human identity this allows activate to apply ownership, governance, attestation and lifecycle rules to that non human identity for example, when an employee leaves an organisation, activate can identify non human identities owned by that person and apply the organisation's business rules to review, transfer, disable or otherwise manage those identities one identity, one identity license type each managed identity is assigned one activate identity license type at any point in time the identity license type reflects how activate is configured to manage that identity for example an employee requiring full lifecycle management would normally be classified as a workforce identity a cleaner requiring only building access would normally be classified as a managed only identity a partner with limited application access may be classified as a custom or external identity a service account would normally be classified as a non human identity if the way an identity is managed changes, its identity license type may also change for licensing purposes, the identity is counted under the identity license type assigned to it at the applicable reporting date packages, identity license types and add ons there are three separate parts to consider when determining an activate subscription packages determine the activate capabilities available to your organisation identity license types classify the different identity populations being managed by activate add ons provide additional specialised capabilities that can be purchased where required some add ons may have their own licensing rules based on the capability being provided purchasing or applying an add on does not automatically change the underlying identity license type of a managed identity your activate quote or subscription agreement identifies the packages, identity license types, add ons and quantities that apply to your organisation how are identity license quantities determined? activate automatically measures the number of managed identities within each applicable identity license type these counts are used to provide license reporting and, depending on the subscription arrangement, to determine monthly or annual subscription charges and to support the annual license review for more information, see how activate license counts are calculated