{"id":31656,"date":"2019-10-31T21:42:23","date_gmt":"2019-10-31T18:42:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika\/"},"modified":"2019-10-31T21:42:23","modified_gmt":"2019-10-31T18:42:23","slug":"vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika","title":{"rendered":"Implementarea IdM. Preg\u0103tirea pentru implementare din partea clientului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00cen articolele anterioare, am discutat deja despre ce este IdM, cum s\u0103 \u00een\u021belegem dac\u0103 organiza\u021bia dumneavoastr\u0103 are nevoie de un astfel de sistem, ce probleme rezolv\u0103 \u0219i cum s\u0103 justific\u0103m bugetul de implementare \u00een fa\u021ba conducerii. Ast\u0103zi vom vorbi despre etapele importante pe care organiza\u021bia trebuie s\u0103 le parcurg\u0103 pentru a atinge un nivel adecvat de maturitate \u00eenainte de implementarea sistemului IdM. Deoarece IdM este destinat s\u0103 automatizeze procesele, automatizarea haosului este imposibil\u0103.<\/p>\n<p><img decoding=\"async\" alt=\"Implementarea IdM. Preg\u0103tirea pentru implementare din partea clientului\" src=\"\/wp-content\/uploads\/2019\/04\/7afbc5d602a3a4ac7d254438769f7cf1.png\" style=\"display:block;margin: 0 auto;\" \/><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>P\u00e2n\u0103 c\u00e2nd o companie cre\u0219te p\u00e2n\u0103 la dimensiunile unei mari \u00eentreprinderi \u0219i acumuleaz\u0103 o mul\u021bime de diferite sisteme de afaceri, de obicei nu se g\u00e2nde\u0219te la managementul accesului. Prin urmare, procesele de ob\u021binere a drepturilor \u0219i de control al autorit\u0103\u021bilor nu sunt structurate \u0219i sunt greu de analizat. Angaja\u021bii depun cereri pentru acces cum doresc, procesul de aprobat nu este formalizat, iar uneori acesta nu exist\u0103 deloc. Este imposibil s\u0103 se \u00een\u021beleag\u0103 rapid ce acces are un angajat, cine le-a aprobat \u0219i pe ce baz\u0103.<\/p>\n<p><img decoding=\"async\" alt=\"Implementarea IdM. Preg\u0103tirea pentru implementare din partea clientului\" src=\"\/wp-content\/uploads\/2019\/04\/1c0a8c343cc577d6f8ad11d0b862a734.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAv\u00e2nd \u00een vedere c\u0103 procesul de automatizare a accesului implic\u0103 dou\u0103 p\u0103r\u021bi principale \u2013 datele de personal \u0219i datele sistemelor informa\u021bionale cu care urmeaz\u0103 s\u0103 se realizeze integrarea, s\u0103 analiz\u0103m pa\u0219ii necesari pentru ca implementarea IdM s\u0103 decurg\u0103 f\u0103r\u0103 probleme \u0219i s\u0103 nu provoace respingere:<\/p>\n<ol>\n<li>Analiza proceselor de personal \u0219i optimizarea \u00eentre\u021binerii bazei de date a angaja\u021bilor \u00een sistemele de resurse umane.<\/li>\n<li>Analiza datelor despre utilizatori \u0219i drepturi, precum \u0219i actualizarea metodelor de gestionare a accesului \u00een sistemele \u021bint\u0103 care urmeaz\u0103 s\u0103 fie conectate la IdM.<\/li>\n<li>Activit\u0103\u021bi organiza\u021bionale \u0219i implicarea personalului \u00een procesul de preg\u0103tire pentru implementarea IdM.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Date de personal<\/h3>\n<p>\nSursa datelor de personal \u00een organiza\u021bie poate fi una sau mai multe. De exemplu, organiza\u021bia poate avea o re\u021bea de filiale destul de extins\u0103, iar \u00een fiecare filial\u0103 poate fi utilizat\u0103 propria baz\u0103 de date de personal.<\/p>\n<p>\u00cen primul r\u00e2nd, este necesar s\u0103 \u00een\u021belegem ce date principale despre angaja\u021bi sunt stocate \u00een sistemul de contabilitate a personalului, ce evenimente sunt \u00eenregistrate \u0219i s\u0103 evalu\u0103m completitudinea \u0219i structura acestora.<\/p>\n<p>Adesea, nu toate evenimentele de personal sunt \u00eenregistrate \u00een sursa de personal (\u0219i \u0219i mai frecvent acestea sunt \u00eenregistrate intempestiv \u0219i nu foarte corect). Iat\u0103 c\u00e2teva exemple tipice:<\/p>\n<ul>\n<li>nu se \u00eenregistreaz\u0103 concediile, categoriile acestora \u0219i termenii (concedii obi\u0219nuite sau de lung\u0103 durat\u0103);<\/li>\n<li>nu se \u00eenregistreaz\u0103 ocuparea par\u021bial\u0103: de exemplu, \u00een timpul unei concediu prelungit pentru \u00eengrijirea copilului, un angajat poate lucra simultan cu norm\u0103 par\u021bial\u0103;<\/li>\n<li>statutul efectiv al candidatului sau angajatului s-a schimbat deja (angajare \/ transfer \/ concediere), iar ordinul pentru acest eveniment \u00eent\u00e2rzie;<\/li>\n<li>angajatul este transferat \u00eentr-o nou\u0103 func\u021bie prin concediere, iar \u00een sistemul de resurse umane nu se \u00eenregistreaz\u0103 informa\u021bii c\u0103 aceasta este o concediere tehnic\u0103.<\/li>\n<\/ul>\n<p>\nDe asemenea, merit\u0103 acordat\u0103 aten\u021bie evalu\u0103rii calit\u0103\u021bii datelor, deoarece erorile \u0219i inexactit\u0103\u021bile provenite dintr-o surs\u0103 de \u00eencredere, cum sunt sistemele de contabilitate a personalului, pot duce \u00een continuare la costuri mari \u0219i numeroase probleme la implementarea IdM. De exemplu, angaja\u021bii departamentului de resurse umane adesea introduc func\u021biile angaja\u021bilor \u00een sistemul de resurse umane \u00een formate diferite: litere mari \u0219i mici, abrevieri, num\u0103r diferit de spa\u021bii etc. Ca rezultat, aceea\u0219i func\u021bie poate fi \u00eenregistrat\u0103 \u00een sistemul de resurse umane \u00een urm\u0103toarele varia\u021bii:<\/p>\n<ul>\n<li>Manager senior<\/li>\n<li>manager senior<\/li>\n<li>m. senior<\/li>\n<li>m. senior\u2026<\/li>\n<\/ul>\n<p>\nAdesea \u00eent\u00e2lnim \u0219i diferen\u021be \u00een scrierea numelui \u0219i prenumelui:<\/p>\n<ul>\n<li>\u0218mel\u00ebva Natalia Ghenadieva,<\/li>\n<li>\u0218mel\u00ebva Natalia Ghenadieva\u2026<\/li>\n<\/ul>\n<p>\nPentru a continua automatizarea, un astfel de amestec este inacceptabil, mai ales dac\u0103 aceste atribute sunt un semn cheie de identificare, adic\u0103 datele despre angajat \u0219i atribu\u021biile sale \u00een sisteme sunt corelate exact dup\u0103 nume \u0219i prenume.<\/p>\n<p><img decoding=\"async\" alt=\"Implementarea IdM. Preg\u0103tirea pentru implementare din partea clientului\" src=\"\/wp-content\/uploads\/2019\/04\/02a88e4af7d06b3eb0268b5a9f38e8a6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n\u00cen plus, nu trebuie uitat faptul c\u0103 \u00een companie pot exista oameni cu acela\u0219i nume \u0219i persoane omonime. Dac\u0103 organiza\u021bia are o mie de angaja\u021bi, astfel de coinciden\u021be pot fi pu\u021bine, dar dac\u0103 exist\u0103 50 de mii, aceasta poate deveni un obstacol critic pentru func\u021bionarea corect\u0103 a sistemului IdM.<\/p>\n<p><b>Rezum\u00e2nd cele de mai sus, ajungem la concluzia c\u0103 formatul de introducere a datelor \u00een baza de resurse umane a organiza\u021biei trebuie s\u0103 fie standardizat.<\/b> Parametrii de introducere a numelui, func\u021biilor \u0219i subdiviziunilor trebuie s\u0103 fie clar defini\u021bi. Cea mai bun\u0103 op\u021biune este ca angajatul din resurse umane s\u0103 nu introduc\u0103 datele manual, ci s\u0103 le aleag\u0103 dintr-un director predefinit al structurii subdiviziunilor \u0219i func\u021biilor prin func\u021bia \u00abselect\u00bb, disponibil\u0103 \u00een baza de resurse umane.<\/p>\n<p>Pentru a evita erori ulterioare \u00een sincronizare \u0219i a nu fi nevoit s\u0103 corectezi manual discrepan\u021bele din rapoarte, <b>cea mai preferat\u0103 metod\u0103 de identificare a angaja\u021bilor este introducerea unui ID <\/b>pentru fiecare angajat al organiza\u021biei. Acest identificator va fi alocat fiec\u0103rui nou angajat \u0219i va ap\u0103rea at\u00e2t \u00een sistemul de resurse umane, c\u00e2t \u0219i \u00een sistemele informa\u021bionale ale organiza\u021biei ca un atribut obligatoriu al contului. Nu conteaz\u0103 dac\u0103 este format din cifre sau litere - important este s\u0103 fie unic pentru fiecare angajat (de exemplu, multe organiza\u021bii folosesc num\u0103rul de identificare al angajatului). \u00cen continuare, introducerea acestui atribut va facilita semnificativ corelarea datelor despre angajat \u00een sursa de resurse umane cu conturile \u0219i drepturile sale \u00een sistemele informa\u021bionale.<\/p>\n<p>Astfel, toate pa\u0219ii \u0219i mecanismele de contabilitate a personalului vor trebui analizate \u0219i ordonate. Este posibil ca unele procese s\u0103 necesite modific\u0103ri sau \u00eembun\u0103t\u0103\u021biri. Aceasta este o munc\u0103 obositoare \u0219i mig\u0103loas\u0103, dar necesar\u0103; altfel, absen\u021ba unor date clare \u0219i structurate despre evenimentele de personal va duce la erori \u00een procesarea lor automat\u0103. \u00cen cel mai r\u0103u caz, procesele nestructurate nu vor putea fi automatizate deloc.<\/p>\n<h3>Sistemele \u021bint\u0103<\/h3>\n<p>\n\u00cen etapa urm\u0103toare, trebuie s\u0103 stabilim c\u00e2te sisteme informa\u021bionale dorim s\u0103 integr\u0103m \u00een structura IdM, ce date despre utilizatori \u0219i drepturile acestora sunt stocate \u00een aceste sisteme \u0219i cum le vom gestiona.<\/p>\n<p>\u00cen multe organiza\u021bii exist\u0103 p\u0103rerea c\u0103, odat\u0103 ce vom instala IdM, vom configura conectorii pentru sistemele \u021bint\u0103 \u0219i, ca printr-o baghet\u0103 magic\u0103, totul va func\u021biona f\u0103r\u0103 eforturi suplimentare din partea noastr\u0103. Din p\u0103cate, nu se \u00eent\u00e2mpl\u0103 a\u0219a. \u00cen companii, peisajul sistemelor informa\u021bionale se dezvolt\u0103 \u0219i se extinde treptat. Fiecare dintre aceste sisteme poate avea o abordare diferit\u0103 \u00een ceea ce prive\u0219te acordarea drepturilor de acces, adic\u0103 pot fi configurate diferite interfe\u021be de gestionare a accesului. \u00cen unele locuri, managementul se face prin API (interfa\u021ba de programare a aplica\u021biilor), \u00een altele prin baza de date folosind proceduri stocate, \u00een timp ce \u00een unele cazuri, interfe\u021bele de interac\u021biune ar putea s\u0103 nu existe deloc. Trebuie s\u0103 fim preg\u0103ti\u021bi pentru a revizui multe dintre procesele existente de gestionare a conturilor \u0219i drepturilor \u00een sistemele organiza\u021biei: s\u0103 modific\u0103m formatul datelor, s\u0103 dezvolt\u0103m anterior interfe\u021bele de interac\u021biune \u0219i s\u0103 aloc\u0103m resurse pentru aceste lucr\u0103ri.<\/p>\n<h3>Modelul de rol<\/h3>\n<p>\nCu conceptul de model de rol te vei confrunta, probabil, \u00eenc\u0103 din etapa de alegere a furnizorului de solu\u021bii IdM, deoarece acesta este unul dintre conceptele cheie \u00een domeniul managementului drepturilor de acces. \u00cen acest model, acordarea accesului la date se face prin intermediul unui rol. Rolul reprezint\u0103 un set de drepturi, minime necesare pentru ca un angajat pe o anumit\u0103 pozi\u021bie s\u0103 \u00ee\u0219i \u00eendeplineasc\u0103 sarcinile func\u021bionale.<\/p>\n<p>Managementul accesului pe baz\u0103 de rol are o serie de avantaje indiscutabile:<\/p>\n<ul>\n<li>simplicitate \u0219i eficien\u021b\u0103 \u00een acordarea acelora\u0219i drepturi unui num\u0103r mare de angaja\u021bi;<\/li>\n<li>modificarea rapid\u0103 a accesului angaja\u021bilor care au acela\u0219i set de drepturi; <\/li>\n<li>excluderea redundan\u021bei drepturilor \u0219i delimitarea competen\u021belor incompatibile pentru utilizatori.<\/li>\n<\/ul>\n<p>\nMatricea de roluri este mai \u00eent\u00e2i construit\u0103 separat \u00een fiecare dintre sistemele organiza\u021biei, apoi se extinde pe \u00eentreg peisajul IT, unde din rolurile fiec\u0103rui sistem se formeaz\u0103 rolurile globale de afaceri. De exemplu, rolul de afaceri \u201eContabil\u201d va include mai multe roluri separate din fiecare dintre sistemele informa\u021bionale utilizate \u00een contabilitatea organiza\u021biei.<\/p>\n<p>Recent trends suggest that it is considered 'best practice' to create a role model during the application, database, and operating system development stages. However, there are often situations where roles in the system are not configured or simply do not exist. In such cases, the administrator of this system must enter the account data into several different files, libraries, and directories that provide the necessary permissions. Using predefined roles allows privileges to be granted for a whole range of operations within the system involving complex composite data.<\/p>\n<p>Roles in an information system are generally distributed based on positions and departments according to the organizational structure, but they can also be created for specific business processes. For example, in a financial organization, several employees in the settlement department hold the same position \u2014 operator. However, within the department, there is also a distribution among separate processes for different types of operations (external or internal, in different currencies, with various segments of the organization). To provide each business direction of a department with access in the information system according to its specific needs, it is essential to include rights in separate functional roles. This allows for granting a minimally sufficient set of powers without including excessive rights for each area of activity.<\/p>\n<p>Moreover, for large systems with hundreds of roles, thousands of users, and millions of permissions, a good practice is to use role hierarchies and privilege inheritance. For instance, the parent role of Administrator will inherit the privileges of the child roles: User and Reader, since the Administrator can perform all the actions a User and Reader can, plus have additional administrative rights. With a hierarchy, there is no need to repeatedly specify the same rights across multiple roles within the same module or system.<\/p>\n<p>\u00cen prima etap\u0103, se pot crea roluri \u00een acele sisteme unde num\u0103rul combinatiilor de drepturi nu este foarte mare, f\u0103c\u00e2nd astfel gestionarea unui num\u0103r mic de roluri relativ simpl\u0103. Acestea pot include drepturi tipice necesare tuturor angaja\u021bilor companiei, \u00een sisteme precum catalogul Active Directory (AD), sistemele de e-mail, Service Manager \u0219i altele similare. Apoi, matricele de roluri create pentru sistemele informa\u021bionale pot fi incluse \u00een modelul general de roluri, fiind consolidate \u00een roluri de business.<\/p>\n<p>Folosind o astfel de abordare, ulterior, la implementarea sistemului IdM, va fi u\u0219or s\u0103 se automatizeze \u00eentregul proces de acordare a drepturilor de acces pe baza rolurilor create \u00een prima etap\u0103.<\/p>\n<p><b>N.B. <\/b>Nu trebuie s\u0103 \u00eencerca\u021bi s\u0103 integra\u021bi c\u00e2t mai multe sisteme \u00een acela\u0219i timp. Sistemele cu o arhitectur\u0103 \u0219i o structur\u0103 de gestionare a drepturilor de acces mai complexe ar trebui conectate la IdM \u00een mod semi-automat \u00een prima etap\u0103. Adic\u0103, pe baza evenimentelor de resurse umane, s\u0103 se realizeze doar formarea automat\u0103 a unei cereri de acces, care va fi trimis\u0103 spre executare administratorului, iar acesta \u00ee\u0219i va configura manual drepturile.<\/p>\n<p>Dup\u0103 ce prima etap\u0103 a fost finalizat\u0103 cu succes, se poate extinde func\u021bionalitatea sistemului la noi procese de business, realiz\u00e2nd automatizarea complet\u0103 \u0219i scalarea prin conectarea unor sisteme informa\u021bionale suplimentare.<\/p>\n<p><img decoding=\"async\" alt=\"Implementarea IdM. Preg\u0103tirea pentru implementare din partea clientului\" src=\"\/wp-content\/uploads\/2019\/04\/8962ae078524c321544b00816e2d3780.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Cu alte cuvinte, pentru a v\u0103 preg\u0103ti pentru implementarea IdM, trebuie s\u0103 evalua\u021bi preg\u0103tirea sistemelor informa\u021bionale pentru noul proces \u0219i s\u0103 refaceti din timp interfe\u021bele externe de interac\u021biune pentru gestionarea conturilor \u0219i a drepturilor utilizatorilor, dac\u0103 astfel de interfe\u021be lipsesc din sistem. De asemenea, ar trebui s\u0103 elabora\u021bi un plan pentru crearea etapizat\u0103 a rolurilor \u00een sistemele informa\u021bionale pentru o gestionare complex\u0103 a accesului.<\/i><\/p>\n<h3>Activit\u0103\u021bi organizatorice<\/h3>\n<p>\nNu trebuie s\u0103 ignor\u0103m aspectele organizatorice. \u00cen unele cazuri, acestea pot juca un rol decisiv, deoarece rezultatul \u00eentregului proiect depinde adesea de o interac\u021biune eficient\u0103 \u00eentre departamente. De aceea, de obicei sf\u0103tuim s\u0103 form\u0103m \u00een organiza\u021bie o echip\u0103 de participan\u021bi la proces, care s\u0103 includ\u0103 toate departamentele implicate. Fiindc\u0103 aceasta este o sarcin\u0103 suplimentar\u0103 pentru oameni, \u00eencerca\u021bi din timp s\u0103 le explica\u021bi tuturor participan\u021bilor rolul \u0219i importan\u021ba lor \u00een structura de interac\u021biune. Dac\u0103 reu\u0219i\u021bi s\u0103 \u201evinde\u021bi\u201d colegilor ideia IdM \u00een acest stadiu, se pot evita multe dificult\u0103\u021bi ulterioare.<\/p>\n<p><img decoding=\"async\" alt=\"Implementarea IdM. Preg\u0103tirea pentru implementare din partea clientului\" src=\"\/wp-content\/uploads\/2019\/04\/b230e2a7bba590300dd11a4e7eefdf60.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAdesea, \u201eproprietarii\u201d proiectului de implementare IdM \u00een companie sunt departamentele de securitate informa\u021bional\u0103 sau IT, iar opinia departamentelor de afaceri nu este avut\u0103 \u00een vedere. Aceasta este o mare gre\u0219eal\u0103, deoarece numai ace\u0219tia \u0219tiu \u00een ce mod \u0219i \u00een care procese de afaceri este utilizat fiecare resurs\u0103, cui trebuie s\u0103 \u00eei fie acordat accesul \u0219i cui nu. De aceea, \u00een etapa de preg\u0103tire, este important s\u0103 se sublinieze c\u0103 exact proprietarul de afaceri este responsabil pentru modelul func\u021bional pe baza c\u0103ruia sunt dezvoltate seturile de drepturi (roluri) ale utilizatorilor \u00een sistemul informa\u021bional, precum \u0219i pentru a se asigura c\u0103 aceste roluri sunt men\u021binute actualizate. Modelul pe roluri nu este o matrice static\u0103, pe care o construie\u0219ti o dat\u0103 \u0219i apoi te po\u021bi lini\u0219ti. Este un \u201eorganism viu\u201d, care trebuie s\u0103 se schimbe, s\u0103 se actualizeze \u0219i s\u0103 evolueze constant, urm\u00e2nd modific\u0103rile structurii organiza\u021biei \u0219i func\u021bionalit\u0103\u021bii angaja\u021bilor. Altfel, fie vor ap\u0103rea probleme legate de \u00eent\u00e2rzierile \u00een acordarea accesului, fie vor ap\u0103rea riscuri de securitate informa\u021bional\u0103 legate de drepturi excesive de acces, ceea ce este \u0219i mai r\u0103u.<\/p>\n<p>Dup\u0103 cum se \u0219tie, \u201ela cei \u0219apte bone, copilul f\u0103r\u0103 ochi\u201d, prin urmare, compania trebuie s\u0103 dezvolte o metodologie care s\u0103 descrie arhitectura modelului de rol, interac\u021biunea \u0219i responsabilitatea participan\u021bilor specifici \u00een procesul de men\u021binere a acestuia \u00een stare actualizat\u0103. Dac\u0103 \u00een companie exist\u0103 multe direc\u021bii de activitate economic\u0103 \u0219i, \u00een consecin\u021b\u0103, o multitudine de departamente, atunci pentru fiecare direc\u021bie (de exemplu, creditare, operare, servicii la distan\u021b\u0103, conformitate etc.) trebuie s\u0103 fie numi\u021bi curatori specifici \u00een cadrul procesului de management al rolurilor de acces. Prin intermediul acestora, se poate ob\u021bine rapid informa\u021bii despre schimb\u0103rile din structura departamentului \u0219i drepturile de acces necesare pentru fiecare rol.<\/p>\n<p>Este esen\u021bial s\u0103 ob\u021bine\u021bi sprijinul conducerii organiza\u021biei pentru a rezolva situa\u021biile conflictuale \u00eentre departamentele participante la proces. Conflictele sunt inevitabile \u00een implementarea oric\u0103rui nou proces, crede\u021bi-ne pe cuv\u00e2nt. Prin urmare, este necesar un arbitru care s\u0103 gestioneze conflictele de interese, pentru a nu pierde timp din cauza ne\u00een\u021belegerilor sau sabotorilor.<\/p>\n<p><img decoding=\"async\" alt=\"Implementarea IdM. Preg\u0103tirea pentru implementare din partea clientului\" src=\"\/wp-content\/uploads\/2019\/04\/2d52e4b68be059cd908ed5c9dfc3cfb5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<b>N.B. <\/b>O ini\u021biativ\u0103 bun\u0103 pentru cre\u0219terea nivelului de con\u0219tientizare va fi formarea personalului. Studiul detaliat al func\u021bion\u0103rii viitorului proces \u0219i al rolului fiec\u0103rui participant va minimiza dificult\u0103\u021bile trecerii la noua solu\u021bie.<\/p>\n<h3>Checklist<\/h3>\n<p>\n\u00cen concluzie, s\u0103 rezum\u0103m pa\u0219ii principali pe care organiza\u021bia ar trebui s\u0103-i fac\u0103 in vederea implement\u0103rii IdM:<\/p>\n<ul>\n<li>s\u0103 ordoneze datele de personal;<\/li>\n<li>s\u0103 introduc\u0103 un parametru de identificare unic pentru fiecare angajat;<\/li>\n<li>s\u0103 evalueze preg\u0103tirea sistemelor informa\u021bionale pentru implementarea IdM;<\/li>\n<li>s\u0103 dezvolte interfe\u021be de interac\u021biune cu sistemele informa\u021bionale pentru managementul accesului, dac\u0103 acestea nu exist\u0103, \u0219i s\u0103 aloce resurse pentru aceste lucr\u0103ri;<\/li>\n<li>s\u0103 dezvolte \u0219i s\u0103 construiasc\u0103 un model de rol;<\/li>\n<li>s\u0103 organizeze procesul de management al modelului de rol \u0219i s\u0103 includ\u0103 curatori din fiecare direc\u021bie de business;<\/li>\n<li>s\u0103 aleag\u0103 c\u00e2teva sisteme pentru conectarea ini\u021bial\u0103 la IdM;<\/li>\n<li>s\u0103 creeze o echip\u0103 de proiect eficient\u0103;<\/li>\n<li>s\u0103 ob\u021bin\u0103 sprijinul conducerii companiei;<\/li>\n<li>s\u0103 formeze personalul.<\/li>\n<\/ul>\n<p>\nProcesul de preg\u0103tire poate fi dificil, a\u0219a c\u0103, dac\u0103 este posibil, angaja\u021bi consultan\u021bi.<\/p>\n<p>Implementarea unei solu\u021bii IdM este un pas complicat \u0219i responsabil, iar pentru o realizare de succes sunt importante at\u00e2t eforturile fiec\u0103rei p\u0103r\u021bi separat \u2013 angaja\u021bii din departamentele de afaceri, IT \u0219i servicii de securitate informa\u021bional\u0103, c\u00e2t \u0219i colaborarea \u00eentregii echipe \u00een ansamblul s\u0103u. Dar eforturile merit\u0103: dup\u0103 implementarea IdM \u00een companie, num\u0103rul incidentelor legate de privilegii excesive \u0219i drepturi neautorizate \u00een sistemele informa\u021bionale scade; perioadele de neactivitate a angaja\u021bilor din cauza lipsei\/\u00eent\u00e2rzierii drepturilor necesare dispar; prin automatizare, se reduc costurile de munc\u0103 \u0219i cre\u0219te productivitatea serviciilor IT \u0219i de securitate informa\u021bional\u0103.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/solarsecurity\/blog\/447536\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 IdM, \u043a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0443\u0436\u043d\u0430 \u043b\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043a\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u043d\u0430 \u0440\u0435\u0448\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u0432\u0430\u0436\u043d\u044b\u0445 \u044d\u0442\u0430\u043f\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u043b\u0436\u043d\u0430 \u043f\u0440\u043e\u0439\u0442\u0438 \u0441\u0430\u043c\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b IdM. \u0412\u0435\u0434\u044c IdM \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23566,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31656","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 IdM, \u043a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0443\u0436\u043d\u0430 \u043b\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043a\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u043d\u0430 \u0440\u0435\u0448\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 IdM. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 IdM, \u043a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0443\u0436\u043d\u0430 \u043b\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043a\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u043d\u0430 \u0440\u0435\u0448\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:42:23+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:42:23+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Implementarea IdM. Preg\u0103tirea pentru implementare din partea clientului | ProHoster","description":"\u00cen articolele anterioare am discutat deja despre ce este IdM, cum s\u0103 \u00een\u021belege\u021bi dac\u0103 organiza\u021bia dumneavoastr\u0103 are nevoie de un astfel de sistem, ce probleme rezolv\u0103 \u0219i cum s\u0103 justifica\u021bi bugetul pentru implementare \u00een fa\u021ba conducerii.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 IdM. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u044f\u0445 \u043c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 IdM, \u043a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043d\u0443\u0436\u043d\u0430 \u043b\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u043a\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u043d\u0430 \u0440\u0435\u0448\u0430\u0435\u0442 \u0438 \u043a\u0430\u043a \u043e\u0431\u043e\u0441\u043d\u043e\u0432\u0430\u0442\u044c \u0431\u044e\u0434\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/vnedrenie-idm-podgotovka-k-vnedreniyu-so-storony-zakazchika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:23+00:00","article:modified_time":"2019-10-31T18:42:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31656","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:13:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:13:28","updated":"2026-01-21 07:13:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31656","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=31656"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31656\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/23566"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=31656"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=31656"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=31656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}