Role Mining

Definitions

1. The analysis of existing permission assignments and usage patterns to discover candidate roles or simplify a role-based access control model. Role mining is often used in large IAM projects, though it can reproduce old mistakes if historical access was already overprivileged.

   In plain English: Analyzing existing permissions to discover useful roles for access control.

   Example: "The IAM program used role mining to propose shared access bundles, then had business owners validate whether those patterns were actually legitimate."

Related Terms

• Authorization
• Access Control List
• Active Directory
• Anomaly Detection
• Authentication Bypass
• Behavioral Analysis
• Role Engineering
• Role Explosion