Divisions within larger user identity categories are called?

• A. Administration
• B. Identity Life Cycle
• C. Vendors
• D. Subgroups

Answer: (D)

Subgroups are divisions within larger identity categories. In identity and access management, groups organize users, and subgroups are nested groups that create a hierarchy inside a parent group. This structure makes it easier to manage permissions at scale: permissions granted to the parent group can flow to its subgroups, while still allowing specific adjustments as needed.

For example, you might have a top-level group called Employees, with subgroups like Engineering and Sales, and further subdivisions like Engineering -> Frontend and Engineering -> Backend. This enables both broad and granular access control without duplicating permissions.

The other terms don’t fit because administration refers to managing users and their access rather than dividing identity categories; Identity Life Cycle covers provisioning and deprovisioning across a user’s lifetime; and Vendors are external providers—not the divisions within identity categories.