who.er is a cloud-hosted identity and access management platform that helps teams control user permissions, streamline onboarding, and audit account activity. It focuses on secure yet straightforward role management for modern organizations.
The service integrates with common productivity tools and directory solutions to centralize access control. Below is a quick reference overview to understand its core components.
| Component | Description | Typical Use Case | Key Benefit |
|---|---|---|---|
| Role Definitions | Predefined sets of permissions grouped by job function | Assigning appropriate access levels to new hires | Reduces misconfigurations and excessive privileges |
| User Directory Sync | Automatic import and update of user profiles from HR or identity sources | Onboarding and offboarding workflows | Ensures access reflects current org structure |
| Approval Workflows | Manager or security reviewer sign-off for access requests | Granting elevated permissions for sensitive systems | Adds governance and auditability |
| Access Certification | Scheduled reviews where users confirm needed permissions | Quarterly compliance checks | Maintains least-privilege posture over time |
Understanding Role-Based Access Control
Role-Based Access Control (RBAC) in who.er maps job responsibilities to digital permissions. Instead of assigning rights to individuals, teams create roles such as Viewer, Editor, or Admin and attach them to people as needed.
This approach simplifies management when staff change roles or leave the company. Permissions travel with the role rather than with personal accounts, which reduces orphaned access and makes audits more straightforward.
Integrations and Directory Management
who.er connects with major cloud directories and identity providers to keep user data synchronized. This includes importing from HR systems, Single Sign-On platforms, and existing Lightweight Directory Access Protocol setups.
When a new employee is added to the source directory, their account can automatically appear in who.er with suggested roles. Updates such as name changes or team transfers propagate without manual rework in most scenarios.
Security Policies and Governance Features
The platform offers governance tools like conditional access rules, session timeouts, and risk-based prompts for sensitive actions. Admins can define policies that block login from unexpected regions or require multi-factor authentication for privileged operations.
Detailed event logs record who requested access, who approved it, and when permissions were modified. These logs support compliance reporting and help security teams investigate suspicious patterns quickly.
Implementation and Adoption Steps
- Inventory existing systems and data stores that require controlled access
- Define role archetypes aligned with team responsibilities and compliance needs
- Configure directory sync from your HR or identity source
- Build automated approval workflows for common access requests
- Schedule recurring access certifications and policy reviews
Optimizing Access Management with who.er
Teams that standardize on who.er often see faster onboarding, fewer permission errors, and clearer ownership of sensitive systems. By combining role definitions, strong policies, and regular certifications, organizations can maintain security without sacrificing operational agility.
FAQ
Reader questions
How does who.er handle permission changes when a team member switches departments?
When a directory sync is enabled, a department change in the source system can automatically trigger an update in who.er. If the new department has different role assignments, the platform can apply a new set of permissions based on predefined mapping rules, pending any required approvals.
Can I restrict access based on device health or location?
Yes, who.er supports conditional access policies that factor in device compliance and geographic location. You can require compliant devices or block logins from countries where your organization does not operate, adding an extra layer of risk control.
What reporting options are available for audit purposes?
The platform provides prebuilt audit reports for access certification, role membership, and approval activity. You can also create custom queries to track specific permission combinations or generate evidence packages for external reviewers.
How are pricing and license management handled in practice?
Pricing is typically based on the number of active users and selected feature tiers, such as advanced governance or unlimited directory connections. Admin consoles allow you to assign or revoke licenses in bulk, with clear visibility into subscription utilization and upcoming renewal dates.