Municipal IT service provider in northwestern Germany: Cross-Domain Privileged Identity Management

Challenge

OWL IT employees permanently held elevated permissions on critical resources - without time limits, without justification requirements, and without monitoring.

Solution

au2mator and System Center Orchestrator now enable full Privileged Identity Management: employees request a privileged role via the portal for a defined period (e.g. 2 hours) with a justification. After expiry, they are automatically removed from the role. Continuous monitoring ensures that roles can only be assigned via au2mator - everything is fully auditable.

Results

• Just-in-time access rights with automatic expiry
• Complete audit trail: who, when, which rights, and why
• Cross-domain and cross-forest implementation