Eight mining algorithms read your actual access patterns and propose roles in plain language — "12 people in Finance share this access" — deduplicated across algorithms, formalized in one click.
Business stories, not cluster IDs
Attribute-based, RBAC, peer-group, hierarchical and other algorithms run in parallel. Overlapping proposals are merged with a rationale, so you review one proposal with full lineage instead of seven duplicates.
Roles as governed objects
Formalized roles live in the catalog with ownership and composition visible, and move through an explicit pipeline: draft → pending approval → active → scheduled offboard → decommissioned. Role content changes trigger a review of the role itself; the role's grants flow through the same reconciliation evidence as everything else.
A 30-minute kickoff connects your HR feed and one system — working POC the same day.