NetIQ Identity Governance Reviews

You can run reports and verify the access each user has. There is a process that runs automatically for access review. It sends an email to the manager and provides a task for the manager to review the users and access. The manager can approve or reject, and then it goes to the application owner for further review. This feature is especially important in large customer environments, as manual review can be challenging.

The product allows you to check if a user has two accesses that should not be granted simultaneously. There's an approval process for this scenario. Primarily, it provides information for governance data.

NetIQ Identity Governance is not flexible. Sometimes, filtering information to provide users with options, such as selecting the application to which they want to request access, can be challenging. It needs to improve application integration as well.

NetIQ Identity Governance is used for review and control access to main business applications. As the Identity Lifecycle is made by NetIQ Identity Manager with provisioning drivers and workflows, NetIQ Identity Governance will do the access review in order to make sure users and accounts are properly activated and deactivated with the rights permissions and accesses.

NetIQ Identity Governance helps to prepare audits and to be "audit ready" every time. With the different connectors, you can collect user accounts and permissions from many different applications. By combining Identity Governance with File reporter you can also collect NTFS permissions from Windows servers.

This solution has been around for a long time. It has had lots of successful deployments and releases. It's mature. It's not for everybody, but it's certainly a capable solution that serves clients well.

They haven't really evolved the product to the cloud, so they don't have a cloud solution. It's just deployable in the cloud, so in some cases that holds them back in a competitive situation. 

I don't know if they're intent on taking their solution to the cloud, but if they do, that would be one improvement. It would allow them to be competitive down market in medium to small enterprises. I don't know if they care to address that market or not because it doesn't seem like they've made that move, but that would be one way for them to do that.

As for additional features, I would suggest stronger integration. I think enabling more universal industry standard integrations would probably help them with different applications.

I use NetIQ Identity Governance to certify access.

NetIQ Identity Governance has improved the security of my company.

We use the solution for access certification, the configuration of duties, and role mining.

All three functionalities, access certification, the configuration of duties, and role mining - especially role mining - are very advanced compared with the competition.

The solution is intuitive and easy to use.

The product is easy to install.

I have found the stability to be quite good. 

According to past experience, it scales well. 

When it comes to our clients here in Chile and Argentina, we implement the solution in respect of permissions, discovering accounts and launching access certification. We use the solution for internal auditing purposes. 

I like the queries and find the catalog to be comparatively powerful. The study sticks graphics are great and simple to use. The current model of the access certification is great. The business role comes with a great model, as well. We make use of all the models. 

• Risk Analysis Engine
• Business-IT Role Mining, Certifications
• Dynamic Grouping
• Life Cycle Management
• Provisioning Integration Modules with IDM solutions
• Intuitive and customized Dashboards
• Advanced Analytics

It automated and completed the user's Life Cycle management (which was manual in many cases), while validation of user's access is being performed for any of his Access Requests. More than that, it helped to build a firm RBAC module with its Role Mining tool and it helped the organization to lower the risk of access to critical applications by non-authorized users and by that it helped push the organization to compliance and readiness for auditing and regulations approval.

We have deployed this solution in banks and government institutions.

I really like the separation of the duties. It is the most ambitious model in the server because you have to create all the different rules, especially business rules. You have to check with the client and set different policies and rules, and then, you to have refine them. You will notice what is bad in the company and where the real problem is.
You may notice that someone has too much power or not enough power. You may also see that a particular group needs more power to obtain results.