$IDDR Those users may be employees, consultants, partners or vendors. Few if any of whom need access to all of the Company's data; they only need access to the data required to do their job and nothing more. With the alarming frequency of large and small scale data thefts daily, and accidental exposure and loss, companies large and small have demanded a cost effective way to control and manage access customized for every end-user or 'identity.' A person who does not need -- and does not have -- access to sensitive data cannot accidently send it to the wrong person, leave it unprotected on an unsecured thumb drive or steal it.

https://finance.yahoo.com/news/iddriven-issue...00688.html