What is the role of role mapping in access management?

• A. Role mapping aligns access with user roles to enforce policy.
• B. Role mapping creates random access across all roles.
• C. Role mapping is about mapping hardware roles.
• D. Role mapping is irrelevant to provisioning.

Answer: (A)

Role mapping in access management ensures that a user's permissions are tied to their assigned role, so access policies are applied consistently. By linking identity attributes—such as job function, department, or group membership—to the entitlements in the system, role mapping supports the principle of least privilege and makes provisioning and changes straightforward. When a person is onboarded, promoted, or leaves, the mapping drives automatic granting, adjusting, or revocation of access to match their current role.

Random access across all roles would violate security principles and undermine policy. Mapping hardware roles isn’t how IAM typically operates, since IAM focuses on user permissions, not device categories. And role mapping is central to provisioning—without it, assigning the right access during onboarding or updates would be inconsistent or manual.