
The most useful feature of my-IAM is the functionality it provides by allowing you to use a template to manage the initial creation or management of the users should they change roles at a company. With the initial creation of users comes several presets you may opt for in Microsoft Office 365, such as special access/restricted options in Microsoft Teams, or specific password expiration policies. Using a template in my-IAM, ensures you have consistency across your accounts but also in the case of user management and data governance you can be certain when you audit accounts, you're compliant and not compromising your security due to a typo, unchecked box, or other human error. Long term management of a user also can be improved by quickly and cleanly cutting a users ties with a previous departments' resources and building in their new access to the appropriate resources without a lot of trial and error or phone calls/messages back and forth with the end user. Review collected by and hosted on G2.com.
When those staff transitions do take place, having a template in my-IAM can simplify opening up or limiting their creditials to the appropriate resources, however in a working environment where there are experienced and inexperienced staff in training, loopholes and exceptions abound. As an example, a new business operations director is hired. The former employee is starting to relinquish roles and responsibilities but still needs nearly unfettered access to train the new hire to some degree on the processes, but perhaps only Email for basic communication. What we often find we have to do, is rather than strictly controlled accounts, is we create a new temporary account that may have some hybrid options. consider the fact that this role is very critical, so missed E-mails or payment deadlines have to be clearly established, since it takes time for vendors and banks to update the contact information, we'll use the old E-mail identity to forward to the new user so everything can be intercepted and dealt with, but disallow any access to other services with those creditials for data governance and auditing sake. The old employee now using this temporary hybrid account that will ultimately be blown away after they leave is limited in its access now, but still allows the new admin to communicate about deadlines or unpaid bills for even some time after official termination as there can be long term agreements in these situations for the former employee to still be asked to contribute to a final report or tax question. While my-IAM can't be to blame for internal structure issues such as this, having a cut and dry system using a template for the role is limiting, however you still have the flexibility to create a template in my-IAM for the temporary accounts, and their known limitations, so if you're willing to use it at all levels, it can still be indispensable, but understanding your userbase and real-worldntransitions is key, or you will be fighting it and making unnecessary work for yourself. Review collected by and hosted on G2.com.
The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.
Validated through a business email account
This reviewer was offered a nominal incentive as thanks for completing this review.
Invitation from G2. This reviewer was offered a nominal incentive as thanks for completing this review.

