Challenge
A leading Central European bank with approximately 12,000 employees faced significant challenges in managing access across its complex IT environment:
- High volume of new joiners and frequent internal transfers
- Delayed onboarding, resulting in reduced employee productivity for days or weeks
- Manual role reengineering processes requiring significant resources
- Role updates unable to keep pace with the organizational and business process changes
- High operational & compliance risks due to obsolete roles
At this scale, traditional role mining approaches were no longer sustainable, creating bottlenecks in IAM processes and increasing dependency on manual effort.
Solution
The organization implemented TheFence DAPP (Dynamic Access Profile Packaging) to modernize and automate role mining and access provisioning.
- Data mining code with explainable analytical AI elements
- Automatic generation and update of role and access profile packages (up to 85 – 100% precision)
- Advanced birthright access setup for new joiners and internal movers
- Integration with existing IAM/IGA systems
By shifting from manual, role-by-role modeling to a data-driven, batch-oriented approach, the bank established a scalable and repeatable role mining and role update capability across its entire access landscape.
Results & Business Impact
- Accelerated onboarding: Employees received the right access from day one, improving productivity
- Operational efficiency: Reduction in manual workload for IAM and IT teams as manually requestable access rights decreased significantly
- Improved security posture: More consistent and precise access assignments reduced excessive / obsolete entitlements
- Scalability: Role mining became repeatable and resilient to organizational changes
For large enterprises, role mining must evolve from manual governance activity to automated access data optimization.
TheFence DAPP enables organizations to achieve this shift, delivering faster onboarding, stronger compliance and measurable business value at scale.
