What is the difference between inherited and derived access in Saviynt ISPM?

Name: Saviynt: Visualizing Risky Access Paths in Identity Security
Uploaded: 2026-03-29T07:26:24-04:00
Duration: 2 min 33 s
Description: TL;DR Saviynt ISPM provides visual mapping of complete access paths from identity through accounts and entitlements to assets, reducing noise in complex identity ecosystems. The platform distinguishes between inherited access (from groups/roles) and de...

Inherited access refers to permissions passed down through group memberships or role assignments, while derived access comes from IGA (Identity Governance and Administration) processes. The platform shows both types so analysts can understand the complete provenance of user permissions.

Saviynt: Visualizing Risky Access Paths in Identity Security

Saviynt

03/29/2026

0 (0%)

Report Like Favorite

Transcript

going to talk about how Savient, with its flagship product of security posture management, is helping organizations to cut down the noise they have in their identity ecosystem. And we are doing that by our Risky Access Paths visualization. So with that being said, my partner in crime, Warren, why don't you show what we have built? Absolutely. And so we're here at the dashboard where we can look right into the identities. Let's get straight into looking at our guy, Ethan, who I like to use for our demos, looking at the specific access path, right? We want to look at the visualization of Ethan's various accounts, the access they're within, and then the privileges that come with that specific access. So we can scroll down looking at all the various things that Ethan has here, he has quite a lot. And we want to look at specifically, you know, the idea that we have all of this right in front of you, including things that might pertain to privilege, and be able to have this right in front of you, whether it's inherited or derived, something that might come from a different process that comes from our IGA part of the product. We can then have all this visibility right in front of the analyst so they can have a strong understanding of not just what access they have, but even why they have it. And you can go back to the dashboarding experience here and look at what's coming up next. Would you like to talk over this? Yeah. So what we have on the platform right now is giving you a visualization of where you are and how your assets are having access to by their identities, where we are going with is the risky access path. So this will allow you as an organization to understand where are the risky paths in your access residing all the way from identity to account to entitlement to asset. That is the single most important aspect when organizations have to think about reducing the risk sprawl which they have. And that is where inherited risk versus derived risk also plays a very important role. SOD violations, peer access analytics. If you have anything around multi-factor authentication not being configured, all of these derived and inherited risk signals coming in a single view, empowering an analyst to understand what's really happening from an access standpoint and start reducing and start taking remedial actions. Exactly right. Immediate action is what we want to provide. And so the visibility to action. That's it. That's the game. Thank you. I hope you all enjoyed this. Once again, we look forward to start working with you on this. Thank you very much. Thank you.

TL;DR

Saviynt ISPM provides visual mapping of complete access paths from identity through accounts and entitlements to assets, reducing noise in complex identity ecosystems.
The platform distinguishes between inherited access (from groups/roles) and derived access (from IGA processes), helping analysts understand both what access exists and why.
Upcoming risk-focused enhancements will flag SOD violations, peer access anomalies, and MFA gaps within the access path visualization for prioritized remediation.

Summary

This demonstration showcases Saviynt's Identity Security Posture Management (ISPM) platform and its Risky Access Paths visualization capability. The platform addresses the challenge of excessive noise in identity ecosystems by providing analysts with comprehensive visibility into how identities gain access to organizational assets. The demo walks through a specific user profile (Ethan) to illustrate how the platform maps the complete access chain from identity to account to entitlement to asset. The visualization reveals both inherited access (permissions passed down through group memberships or roles) and derived access (permissions obtained through IGA processes), enabling security teams to understand not just what access exists, but why it exists. The roadmap preview highlights upcoming enhancements focused on risk-based prioritization, including SOD violation detection, peer access analytics, and multi-factor authentication configuration gaps. The core value proposition centers on transforming visibility into immediate remedial action, helping organizations reduce their identity risk sprawl through data-driven access path analysis.

Chapters

0:00 - Introduction to ISPM
0:29 - Access Path Visualization Demo
1:22 - Risky Access Paths Roadmap
2:14 - Closing Remarks

Key Quotes

0:20 "... we are doing that by our Risky Access Paths visualization ..."
1:32 "... this will allow you as an organization to understand where are the risky paths in your access residing all the way from identity to account to entitlement to asset ..."
2:17 "... the visibility to action. That's it. That's the game."

Categories:

» Cybersecurity » Identity & Access Management (IAM)
» Data Protection

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

11/12/2026

01:00 PM

11/12/2026

Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
11/12/2026

01:00 PM

11/12/2026

Hands-On Workshop: Connecting On-Prem Data to Databricks Using MinIO AIStor (Americas)

https://www.truthinit.com/index.php/channel/2202/hands-on-workshop-connecting-on-prem-data-to-databricks-using-minio-aistor-americas/
11/18/2026

08:00 AM

11/18/2026

Practical Session: Connecting On-Prem Data to Databricks via MinIO AIStor (International)

https://www.truthinit.com/index.php/channel/2194/practical-session-connecting-on-prem-data-to-databricks-via-minio-aistor-international/
11/19/2026

01:00 PM

11/19/2026

Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
11/19/2026

01:00 PM

11/19/2026

Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
11/19/2026

01:00 PM

11/19/2026

A Deep Dive into Muse, Dots, and Duet's Impact on Your Website

https://www.truthinit.com/index.php/channel/2228/a-deep-dive-into-muse-dots-and-duets-impact-on-your-website/
12/03/2026

01:00 PM

12/03/2026

CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era

https://www.truthinit.com/index.php/channel/2231/ciso-insights-steering-cybersecurity-strategies-in-an-ai-driven-era/
01/19/2027

02:00 PM

01/19/2027

HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.

https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
03/18/2027

01:00 PM

03/18/2027

Securing Access for People, Partners and AI Agents

https://www.truthinit.com/index.php/channel/2251/securing-access-for-people-partners-and-ai-agents/
06/17/2027

01:00 PM

06/17/2027

Stop the Leak: Data Loss Prevention for the AI Era

https://www.truthinit.com/index.php/channel/955/360view-stop-the-leak-data-loss-prevention-for-the-ai-era/
08/19/2027

01:00 PM

08/19/2027

Who Has Access to What...and Should They?

https://www.truthinit.com/index.php/channel/2252/who-has-access-to-what-and-should-they/
10/21/2027

01:00 PM

10/21/2027

After VMware: Building the Private Cloud You Actually Want

https://www.truthinit.com/index.php/channel/2253/after-vmware-building-the-private-cloud-you-actually-want/
11/18/2027

01:00 PM

11/18/2027

Assume Breach, Prove Recovery

https://www.truthinit.com/index.php/channel/2254/assume-breach-prove-recovery/
12/16/2027

01:00 PM

12/16/2027

The Self-Running Service Desk

https://www.truthinit.com/index.php/channel/2255/the-self-running-service-desk/