A company’s new systems administrator has been asked to create a new user for the human resources department. Which of the following will help the…

An identity and access control management policy is a document that defines the roles,

responsibilities, and rules for managing the identities and access rights of users in an

organization1. It specifies how users are authenticated, authorized, and audited when they access

the organization’s resources, such as systems, applications, data, and networks1. An identity and

access control management policy also describes the processes and procedures for creating,

modifying, suspending, and deleting user accounts and privileges, as well as the standards and

guidelines for selecting and managing passwords, tokens, certificates, and other authentication

factors1. An identity and access control management policy can help the systems administrator

understand the user privileges for each role in the company, as it defines the access levels and

permissions that are granted to different types of users, such as employees, contractors, vendors,

partners, and customers1. The policy also outlines the criteria and conditions for granting, changing,

or revoking access rights, based on the principle of least privilege and the need-to-know basis1. By

following the identity and access control management policy, the systems administrator can ensure

that the new user for the human resources department has the appropriate and secure access to the

resources that are relevant to their job function and responsibilities1. Reference: 1: CompTIA Cloud

Essentials+ Certification Study Guide, Second Edition (Exam CLO-002), Chapter 3: Cloud Planning,

Section 3.2: Cloud Adoption, Subsection 3.2.1: Identity and Access Management