This project simulates an Identity Governance and Administration (IGA) process within an Active Directory environment.
The lab demonstrates how organizations perform access reviews, validate user permissions, remove unnecessary access, and maintain audit evidence in support of security, compliance, and least-privilege principles.
The objective was to review user access assignments, identify excessive privileges, perform remediation actions, and document the entire review process.
- Windows Server 2022
- Active Directory Domain Services (AD DS)
- Active Directory Users and Computers (ADUC)
- PowerShell
- Security Groups
- Identity Governance Administration (IGA)
- Access Reviews
- Access Certification
- Least Privilege
- Access Remediation
- Security Group Management
- Audit Documentation
- Compliance Readiness
corp.local
- Finance_Review
- HR_Review
- SOC_Review
| User | Department |
|---|---|
| Sarah Finance | Finance |
| Daniel HR | Human Resources |
| Michael SOC | Security Operations |
| User | Assigned Group |
|---|---|
| Sarah Finance | Finance_Review |
| Daniel HR | HR_Review |
| Michael SOC | SOC_Review |
A quarterly access review was conducted to validate user access across the environment.
During the review, it was determined that:
- Daniel HR no longer required access to HR resources.
- Access was deemed unnecessary based on current business requirements.
- Remediation actions were approved and executed.
The following action was performed:
Remove-ADGroupMember -Identity "HR_Review" -Members "Daniel.hr" -Confirm:$falseThe user was successfully removed from the HR_Review security group and access was verified after remediation.
The following evidence was captured throughout the project:
- Security groups created
- User accounts created
- Group memberships before review
- Access review findings
- Remediation actions
- Group memberships after remediation
- Audit documentation
The project includes the following documentation:
- 01-Project-Overview.md
- 02-Access-Assignments.md
- 03-Access-Review-Findings.md
- 04-Remediation-Actions.md
- 05-Lessons-Learned.md
Through this project, I gained practical experience in:
- Conducting access reviews
- Managing Active Directory security groups
- Applying least-privilege principles
- Performing access remediation
- Supporting audit and compliance requirements
- Documenting identity governance activities
Completed
This lab demonstrates a foundational Identity Governance workflow commonly used in enterprise IAM programs to ensure users maintain only the access required for their job responsibilities.