Provisioning is the process of establishing IT infrastructure in business, generally defined at the network, server, application and user levels.
Modern businesses depend heavily on information-technology resources to collect data, facilitate effective communication and collaboration, connect with customers and more. In fact, technology powers essentially every aspect of business—from the services an organisation provides, to how individual employees approach their tasks. Properly implemented, a business’ IT infrastructure helps optimise and support these essential processes. But infrastructure doesn’t develop naturally on its own; it requires effective provisioning.
Simply put, provisioning is an enterprise-wide approach to conceptualising, deploying and managing the full range of IT system resources. Although sometimes used synonymously with the term “configuration”, provisioning is a separate step in the deployment process.
As previously mentioned, there are four distinct levels of provisioning:
Network provisioning is focused on creating and establishing networks which may be accessed by authorised servers, devices and users. This level of provisioning is primarily associated with connectivity and security and relies heavily on device and identity management.
Server provisioning refers to setting up servers for use within networks. This may also include installing operating systems, adjusting software control panels or even assigning servers that have already been configured to specific users.
Application provisioning is centred on optimising performance for specific IT environments within a business. Administrators use application provisioning to create and deploy custom configurations (called packages).
User provisioning (sometimes also called account provisioning) is used to create, modify, delete or disable users accounts within IT infrastructure. User provisioning is focused on user rights and permissions and managing the digital identities they are associated with. When access rights are removed, it is often referred to as deprovisioning.
User provisioning may be the most important level of provisioning for businesses to be involved in on a day-to-day basis. Because every new hire or position change within a company requires an update to user permissions, both provisioning and deprovisioning of users are essential to IT security, employee effectiveness and process efficiency throughout an organisation.
Ensuring that the right users have authorisation to access the right applications and infrastructure brings with it several key business advantages. These benefits include the following:
Effective user provisioning is designed to manage user access privileges and ensure established user security policies. Administrators define user permissions without having direct access to user passwords or other sensitive data, strengthening the business’ overall security posture. And, if a user needs a password change or other support, correct provisioning helps facilitate these tasks easily and quickly.
Going hand in hand with improved security, the right IT provisioning solutions can also help enforce regulatory compliance throughout an organisation. Creating audit logs, strengthening user information access, and enforcing control over sensitive data, provisioning is an effective solution for ensuring that vital standards are understood and being met.
Managing credentials and verifying user identities are both primary functions of effective IT user provisioning. This may help improve employee productivity, eliminating many of the non-productive, time-consuming tasks associated with managing individual application passwords and other provisioning-related issues.
Provisioning allows administrators to manage user and application accounts from a single, centralised system. Application credential changes can be updated automatically, and administrators can provision a range of application accounts throughout the organisation’s IT infrastructure.
Traditional user account management demands a significant investment, both in terms of time and money. Effective provisioning greatly reduces those costs, allowing businesses to earn back more quickly their investment and turn account management into a valuable company resource.
In most organisations, there are several essential, yet potentially cumbersome, processes necessary to ensure accurate user onboarding, offboarding and updating. Addressing these processes manually and individually can easily eat up administrators’ valuable time, potentially hindering their ability to handle other important tasks.
Automated user provisioning automatically adjusts user access rights without the need for manual action on the part of the administrator. When new users join a company, established users change roles or responsibilities, or users leave an organisation, automatic provisioning updates the users IT-resource access. This takes much of the responsibility of managing user permissions off the administrators’ plate.
Automated provisioning may provide several benefits for IT and HR departments. Key advantages of automated provisioning include:
Manual provisioning is never completely secure, particularly where it comes to creating passwords. Traditional methods for creating user accounts almost always involve the sharing of passwords and other log-in info with an employee. This not only makes the password available to at least one individual other than the person the password is intended for, but it also allows for human error as the password is shared across email, organisational communication platforms, or even through handwritten paper notes. Likewise, errors involving assigning the wrong privileges to the wrong users are increasingly common. Automated provisioning eliminates these risks, automatically providing permissions to the right users, accurately and safely.
For peak organisational efficiency, businesses need to ensure that the right people have clear access to the right resources. Unfortunately, keeping track of who has permission to access what, and for how long, can be a difficult prospect when there is no up to-the-minute record of rights and system privileges. Automate provisioning keeps detailed record of each employee’s permission levels, and how those permissions are being used. With a central, connected view of user identities and access, administrators enjoy full transparency.
Often, threat actors take advantage of existing security gaps to seize control of established system permissions or to create new permissions for themselves. Automated provisioning greatly reduces this risk. In addition to eliminating human error from the security equation, automated provisioning systems create a single, approved path for setting and updating access rights. Additionally, administrators have full visibility into who has access. This effectively closes the security gaps that threat actors depend on.
Automatic provisioning systems are an investment; they tend to save organisations more money that they cost them. This is because, while the provisioning solutions aren’t inexpensive, they have the potential to significantly cut down on costs associated with onboarding and operations. And, as previously addressed, provisioning helps streamline IT and HR processes, improving productivity, and thus resulting in increased revenue from other projects.
In traditional provisioning, business growth would often be accompanied by bottlenecks from manually assigning, removing and updating system privileges. Automated provisioning allows organisations to scale at whatever pace is best for them, automatically providing and revoking systems rights and tool access as employees adopt new roles and new hires are brought in. With effective provision automation, companies can streamline their lifecycle management and identity management processes, for unrestricted scalability.
Implementing an effective user provisioning system is not an overly complex process. That said, businesses that want to enjoy the benefits of provisioning should consider taking the following steps:
Automated user provisioning can be an effective method for managing employee lifecycles and identities, but it’s not a magic bullet. To get the most out of a provisioning solution, consider the following best practices:
The more automation the provisioning solution includes, the lower the risk of inaccuracies and security issues. This is especially true for any onboarding or offboarding processes. Automated provisioning and deprovisioning help ensure a smooth and secure transition every time that an employee is hired, promoted, reassigned, given new tools or resources, or leaves a company. At the same time, automated provisioning helps ensure that third-party contractors and partners have easy access to the system resources they need, without compromising sensitive data.
As an employee leaves, the administrator should move quickly to deactivate any permissions associated with that employee, as well as delete them from the directory. This will prevent unaccounted-for access, further improving the organisation’s security standing.
Provisioning software is uniquely suited to empowering administrators in IT and HR with control over roles, access and security policies across departments. By setting additional policies, these administrators can further secure applications and permissions, for increased protection of vital system access.
Systems are only as secure as the users who have access to them. Provisioning gives system administrators full visibility into the status of each employee and the resources they have access to; constant monitoring will help ensure that no user has higher access rights than they need, and that no accounts exist for deactivated users.
ServiceNow, the leader in workflow automation and IT management is revolutionising user provisioning for businesses across a range of industries with IT Asset Management (ITAM) and related solutions. ServiceNow Software Asset Management (SAM) and Cloud Insights bring advanced automation to software allocation and provisioning, reducing time and effort in managing software/cloud resources and ensuring that employees are using the right software, with the right licence type reflective of roles and responsibilities. At the same time, SAM also works hand in hand with Hardware Asset Management (HAM) to provide automated workflows to enable seamless onboarding for new employees, helping to ensure assets are provisioned correctly and that HR and IT both have visibility of what's being deployed, to whom.
Get the most out of your IT resources and ensure that every authorised user has the right access to the right applications and infrastructure, with ITAM from ServiceNow.
Learn more about Process Optimization and put the world’s most advanced workflow and activity diagramming tools to work for you.