Conversational IGA features
All the foundations of IGA. Plus what only LLMs make possible.
Requests, reviews, roles, JML, compliance and reporting, plus plain-language policies, semantic search, auditor-like checks and a full identity timeline.
Explore & Explain
Ask, search, report. In any language.
-
Just ask, in any language.
It understands your jargon, puts things into context and asks refining questions, like your top IAM expert would.
-
Find access by what it does, not by its name.
Traditional search needs exact permission names and keywords. IAMONES understands synonyms and your own terminology.
-
Ask for the report you want.
A new report template used to mean a ticket and a wait. Now you say it: add the department column, or give it to me in Dutch.
-
Upload the documentation you already have.
Descriptions and job titles in your IAM platform are empty or useless. Application owners upload existing documents, and IAMONES does the rest.
AI.M
Identity ConsigliereWho in the Milan finance team is admin on SAP?
Three people: m.conti, a.greco and l.ferri.
The last two use it every week. m.conti has not used it for more than six months. Shall I open a review?
AI.M
Identity ConsigliereWho can move money out of the company?
Four entitlements allow outgoing payments, though none of them says “payment”:
AP_Release
TRSY_WIRE_EXEC
SAP_F110
BNK_UPLOAD
23 people hold at least one of them.
AI.M
Identity ConsigliereAdd the department column, and give me this report in Dutch.
| Naam | Afdeling | Rol |
|---|---|---|
| m.conti | Financiën | Finance Approver |
| a.greco | Treasury | Treasury Viewer |
| p.galli | HR | HR Viewer |
AI.M
Identity ConsigliereSAP_FI_roles.pdf Use this to describe our SAP finance roles.
Done. I described 38 roles from the document, in business words.
Six roles are not in the document. Shall I ask their owners?
Govern & Change
Requests, roles, reviews, JML. In plain business language.
-
Request access in plain business language.
No more ocean of entitlements and roles nobody understands. IAMONES guides you as if the application owners were next to you.
-
Roles from meaning, not from naming.
Role mining used to need a separate tool that looks just like Excel. Now you discover outliers, get suggested roles and cluster users by semantic similarity. Just ask.
-
Campaigns configured in natural language.
Campaign managers describe the campaign and see its impact before launching it: how many reviewers, how many items.
-
JML as plain instructions, ready for audit.
JML processes are often hardcoded in a legacy IAM nobody dares to touch. Here they become instructions: keep your IGA, move to Entra ID, or use the built-in provisioning engine.
AI.M
Identity ConsigliereI need to approve supplier invoices for the Rome office.
The right role is AP Approver, Rome. It lets you approve invoices up to your limit, and nothing else.
Your manager approves it. Submit request
AI.M
Identity ConsigliereSuggest a role for the accounts payable team.
18 of 21 people share the same six entitlements. I suggest a role Accounts Payable Clerk with those six.
Three people are outliers: they also hold VENDOR_MASTER_EDIT.
AI.M
Identity ConsigliereReview privileged access in Finance by the end of the month, without service accounts.
This campaign has 14 reviewers and 312 items. The busiest reviewer gets 61 items.
Launch the campaign
AI.M
Identity ConsigliereWhen someone moves out of Treasury, remove their payment rights the same day.
Instruction saved. From now on, people who leave Treasury lose TRSY_WIRE_EXEC and AP_Release on the day they move.
Assure & Investigate
Controls an auditor would write. Before the auditor does.
-
Write the policy, not the rules.
Risk and compliance specialists write policies such as separation of duties or least privilege in natural language, instead of unmanageable rule and role configurations.
-
Spots what does not fit, out of the box.
When permissions don't match a job title or a department, IAMONES notices: “this person has procurement permissions, and is also IT admin on Salesforce”.
-
Investigate the past without restoring backups.
Change events are kept in the Temporal Identity Graph, so you can ask what anyone could do on any day, or whether a permission was granted and revoked within five minutes.
AI.M
Identity ConsiglierePayments need two approvers outside the requester's team.
Policy saved. Two people break it today: G. Russo and F. Lodi hold both AP_Create and AP_Approve.
Open a review
AI.M
Identity ConsigliereAnything odd in Procurement?
One thing. l.ferri approves purchase orders and is also a Salesforce system administrator.
Nobody else in Procurement has admin rights anywhere.
AI.M
Identity ConsigliereWhat could a.greco do on 1 March?
- Treasury Viewer
- SAP_FI_DISPLAY
- AP_Release, removed in April
Three entitlements. One of them was removed six weeks later.
Example conversations with sample data.