The processes and tools managing user identities, permissions, and access rights to ensure only authorised individuals reach specific systems and data.