Todd Peterson from One Identity Writes:
As you know, recent events forced nearly every organization in the world to quickly adjust the status of its workforce. Whether it was to transition office-based workers to remote access, to temporarily furlough employees with the intent to bring them back at some point, or, unfortunately, to terminate employees; each action required changes to accounts, permissions, group memberships and other attributes in Active Directory (AD).
If your organization is like 95 percent of the Fortune 1000, AD is your enterprise directory-of-record of employee and contractor permissions. I’m sure that you are painfully aware that these changes are no small undertaking. From creating and populating temporary groups, modifying user distribution list, pausing access for furloughed users and terminating access for laid off employees, each of these actions typically requires someone from IT to manually make the changes. When the affected user population is large and the changes are made quickly, the potential for errors is high. READ FULL BLOG HERE