Which term would you associate with verifying that each user has the correct set of permissions and that those permissions reflect current roles?

• A. Digital Identity
• B. Access Review and Certification
• C. Auditing and Reporting
• D. Provisioning

Answer: (B)

The main concept being tested is the governance practice of ensuring that each user’s permissions actually align with their current role. This is handled by Access Review and Certification, where managers or data/entitlement owners regularly attest that a user has the correct set of privileges and that those privileges reflect their job responsibilities. This process is essential for enforcing least privilege, catching drift when roles change, and producing an auditable record for compliance. It’s typically done on a scheduled basis or triggered by role changes, after which mismatches are corrected by revoking unnecessary rights or updating role definitions.

Digital Identity focuses on who a user is and how they authenticate, not on validating permissions against roles. Auditing and Reporting tracks who did what and when, providing visibility but not the proactive attestation that permissions match current roles. Provisioning is about the operational granting and revoking of access; it implements entitlements, whereas the verification against role-actuality happens through access reviews and certification.