skills.rest
drupadsachania
drupadsachaniaCOMMUNITY
Explore all skills by this author →
GitHub

identity-access-management

Manage identity lifecycle phases with least-privilege access enforcement.

Updated May 22, 2026
Search Tags:#authentication#iam#identity#mfa#sso#agent-identity#pam
One-click install
npx skills add https://github.com/drupadsachania/aegis-skills --skill identity-access-management
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: identity-access-management
Source: https://github.com/drupadsachania/aegis-skills/tree/main/skills/identity-access-management
Command: npx skills add https://github.com/drupadsachania/aegis-skills --skill identity-access-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Identity and access management at scale: govern user identities, privileged access, non-human identities, and AI agents while enforcing phishing-resistant authentication and least-privilege.

Core Features & Use Cases

  • Comprehensive IAM governance across joiners/movers/leavers, MFA enrollment, PAM design, secrets management, and agent identity.
  • Agent identity patterns with least privilege and capability token controls for AI agents.
  • Access reviews and SoD enforcement across enterprise environments (enterprise, cloud, saas, hybrid).

Quick Start

Load this skill and begin with the identity-governance phase to initialize lifecycle management and access reviews.

Frequently Asked Questions about identity-access-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage the full identity lifecycle from joiners to leavers across hybrid environments?▼

Identity lifecycle management automates joiner, mover, and leaver processes across cloud, on-prem, SaaS, and hybrid IT environments. It enforces least-privilege access and automates access reviews to maintain governance at scale.

What is the best way to secure AI agent identities and non-human access?▼

Securing AI agent identities requires applying least privilege and capability token controls to non-human accounts. This approach governs agent permissions and prevents unauthorized access across enterprise systems.

How do I enforce separation of duties and least-privilege access in enterprise IAM?▼

Enforcing separation of duties and least-privilege access requires continuous access reviews and PAM design across your IT infrastructure. This limits excessive permissions and reduces the risk of conflicting access rights.

Does this identity governance approach support phishing-resistant MFA and SSO enrollment?▼

Yes, this identity governance approach supports phishing-resistant MFA and SSO enrollment across enterprise environments. It integrates multifactor authentication and single sign-on into the core access management workflow.

Can I use Privileged Access Management for both human and non-human identities in the cloud?▼

Privileged Access Management can secure both human and non-human identities across cloud and SaaS platforms. It applies secrets management and capability controls to govern privileged sessions and prevent unauthorized access.

What are the limitations of enforcing identity governance without dedicated PAM and secrets management?▼

Without dedicated PAM and secrets management, identity governance lacks visibility into privileged accounts and non-human credentials. This blind spot prevents effective least-privilege enforcement and increases exposure to credential theft.

Related Skills

Explore More Software Engineering Skills→
adaptive-enforcement-labadaptive-enforcement-lab
3

iam-configuration

Enforce least-privilege IAM roles for GKE nodes and workloads with audit logging.

Official
Advanced
Hack23Hack23
9

access-control

Enforce least-privilege RBAC and session management across Hack23 projects.

Official
Advanced
borgheiborghei
467

senior-security

Identify and mitigate security risks in software systems using expert security engineering practices.

Community
Advanced
AcczdyAcczdy
2

implementing-just-in-time-access-provisioning

Implement just-in-time access provisioning with time-bound privileges and automatic revocation.

Community
Advanced