Which component stores employee identity data and can be used to inform access decisions?

• A. Human Resources
• B. Identity Repositories
• C. Contractor Database
• D. IAM Systems

Answer: (B)

Identity data storage that informs access decisions is the identity repository. This is the centralized store that holds user identities and their attributes—such as user IDs, roles, group memberships, departments, and entitlements—that authorization engines use to determine what a person is allowed to do. When a user attempts to access a resource, the system checks these attributes against policy rules (for example, RBAC or attribute-based access control) to decide whether access should be granted. While HR systems contain employee records, the identity repository is the canonical source that IAM components query to make accurate and timely authorization decisions. IAM systems enforce policies and rely on the identity repository for the actual identity data, whereas other data sources like contractor databases are more specialized and not the standard store for all employee identities.