A BLCR Networks product
AG
In Development

Identity Governance and Administration

Access Guardian

Govern every identity, entitlement, approval, and access decision.

Access Guardian is an Identity Governance and Administration platform designed to automate Joiner, Mover, and Leaver processes, manage granular entitlements, coordinate enterprise access, and conduct periodic reviews with centralized audit visibility.

Product direction is being validated before broader availability.

Abstract product visual · approved interface imagery can replace this area when available.

Product overview

Enterprise access is often distributed across directories, cloud platforms, business applications, and legacy systems. Access Guardian is designed to give identity, security, application, and audit teams a shared governance layer without replacing the systems where identities and permissions originate.

Access Guardian is being developed as a centralized Identity Governance and Administration platform supporting the enterprise identity lifecycle from onboarding and internal movement through termination.

The intended architecture uses Human Resources events as an authoritative source to coordinate account activity, business roles, technical entitlements, approvals, access certification campaigns, and audit evidence across configured enterprise systems.

Intended users

  • Identity and access management teams
  • Information security teams
  • Compliance and audit teams
  • Human Resources operations
  • IT and SAP security teams
  • Enterprise application owners

Problems being addressed

  • 01Manual Joiner, Mover, and Leaver coordination
  • 02Limited visibility into granular entitlements
  • 03Privilege accumulation after organizational changes
  • 04Fragmented access review and audit evidence

Product direction

Capability groups designed around the operating journey.

These capabilities describe intended product scope. They should not be interpreted as generally available until the product status and configuration confirm availability.

01

Identity lifecycle automation

Designed to coordinate Joiner, Mover, and Leaver events using configured authoritative identity data.

  • Account provisioning and revocation workflows
  • Birthright access assignment
  • Department and position change detection
  • License and group membership workflows
  • Offboarding evidence
02

Fine-grained access

Intended to model business roles, technical roles, and entitlements beyond application-level access.

  • Entitlement catalog
  • RBAC and business role modeling
  • SAP role and profile visibility
  • Microsoft 365 and directory permissions
  • Approval routing
03

Access governance

Planned review, certification, reporting, and administrative experiences for accountable access decisions.

  • Certification campaigns
  • Manager and application-owner reviews
  • Maintain or revoke decisions
  • Access reporting
  • Approval and provisioning history
04

Administration

A centralized operating experience for identities, applications, connectors, roles, policies, and review campaigns.

  • Identity and application administration
  • Connector and entitlement management
  • Role and policy management
  • Integration monitoring
  • Audit dashboards

Planned capabilities

Future scope under evaluation

  • Trigger-based micro-certifications
  • Orphan and dormant account visibility
  • Segregation-aware workflow support
  • Expanded connector documentation and attribute mapping

Integrations

Configuration and connector direction.

Microsoft 365Planned
Microsoft Entra IDPlanned
Active DirectoryPlanned
SAPPlanned
Human Resources systemsConfigurable
REST, SOAP, and JDBC interfacesConfigurable

Intended business value

A more governed and organized way to work.

Greater identity lifecycle consistency
Improved visibility into access and entitlements
More accountable access approvals and reviews
Centralized governance evidence

Product boundaries

Clear technology. Clear responsibilities.

Access Guardian does not replace Microsoft Entra ID, SAP, directory platforms, or other systems of record.

Connector availability depends on implementation status and customer configuration. The platform does not guarantee regulatory compliance, formal certification, or automatic segregation-of-duties enforcement.

Built by BLCR Networks

Learn how Access Guardian is being designed for identity governance and administration.

Discuss product direction, early access, a pilot, or a strategic partnership with the BLCR team.

Request an IGA Demo