---
title: Key terms
slug: key-terms
createdAt: 2025-07-09T05:02:58.505Z
---



This glossary outlines foundational terms used throughout the Activate IAM platform. Understanding these terms will help stakeholders and technical users navigate the product, architecture, and implementation materials with clarity.

### Identity

A digital representation of a user (employee, contractor, service account, etc.) within an organization. Each identity is typically linked to a unique identifier, such as an email address or employee ID.

### Provisioning

The automated process of creating accounts and granting access to systems or applications based on a user’s role or attributes.

### Deprovisioning

The removal or disabling of user accounts and access when they are no longer required — for example, when an employee leaves the organization.

### Entitlement

A specific access right or permission within a system (e.g., "Read-only access to Salesforce Reports"). Entitlements can be grouped into roles.

### Role

A collection of entitlements assigned based on a user’s job function or department. Roles simplify access management and are often tied to policies (e.g., "Finance Analyst Role").

### RBAC (Role-Based Access Control)

An access control model where users receive permissions based on assigned roles. This model helps enforce least privilege.

### ABAC (Attribute-Based Access Control)

An access control model that uses user, resource, or environment attributes (e.g., department = "HR", location = "US") to make access decisions dynamically.

### Joiner–Mover–Leaver (JML)

A common IAM lifecycle model:

- **Joiner**: New user onboarding
- **Mover**: Role or department change
- **Leaver**: Termination or offboarding

### Identity Source (System of Record)

The authoritative system from which identity data is imported (e.g., HRIS like Workday or SAP SuccessFactors).

### Target System

Any downstream application or service where identities need access (e.g., Active Directory, Okta, Salesforce).

### Access Request

A user-initiated process to gain access to new systems or roles, often requiring manager or system owner approval.

### Access Certification / Review

A periodic process where managers or data owners validate that users still require their existing access — critical for compliance.

### Policy Engine

The component that defines and evaluates access rules (e.g., who gets what access under which conditions).

### Connector

An integration module that enables Activate to read/write data from external systems (e.g., provisioning accounts in Azure AD).

### Audit Trail

A complete, immutable log of identity-related events, including provisioning actions, access approvals, and policy evaluations.