By NHI Mgmt Group Editorial TeamPublished 2026-06-26Domain: AnnouncementsSource: Collibra

TL;DR: A fully configurable homepage and role-based landing page assignment in Collibra’s 2026.06 release let administrators route users to different entry points, with Gartner cited as saying role-based UX can improve time-to-value by up to 30%. The governance implication is that landing-page logic is now part of adoption, access design, and operational context, not just UI polish.


At a glance

What this is: Collibra's 2026.06 release adds a configurable homepage and role-based landing page assignment to make the platform's entry point match user context.

Why it matters: It matters because entry-point design now affects how quickly users reach the right governance workflows, which changes onboarding, navigation, and adoption patterns across IAM-adjacent programmes.

By the numbers:

👉 Read Collibra's post on customizable homepage experience and role-based landing pages


Context

Role-based landing pages are a governance pattern, not just a user-experience upgrade. When every user enters a platform through the same default screen, administrators rely on extra clicks, tribal knowledge, or manual workarounds to get people to the right workflow.

In data governance programmes, the first screen shapes whether stewards, analysts, and executives see tasks, assets, or metrics that match their role. Collibra's release is aimed at reducing that mismatch by letting administrators assign different entry points without code or console dependency.


Key questions

Q: How should organisations use role-based homepages in governance platforms?

A: Use them to reduce friction between a user's role and the work they need to do first. The goal is not cosmetic personalization. It is to route stewards, analysts, and leaders to the right tasks, dashboards, or marketplaces faster, while keeping the landing-page logic documented and reviewed like any other governed configuration.

Q: When does a customizable homepage become a governance risk?

A: It becomes a risk when landing-page rules are unmanaged, unclear, or inconsistent with current role design. In that state, users can be sent to the wrong entry point even though their permissions are correct, which creates delay, confusion, and hidden operational drift. Treat the homepage as a governed control surface, not a branding exercise.

Q: What should IAM and IGA teams look for in role-based UX changes?

A: They should look for whether the change improves first-use efficiency without creating hidden entitlement complexity. The best test is whether users reach the right workflows faster, with fewer workarounds, and without depending on manual guidance. If not, the UX has shifted the problem instead of solving it.

Q: How do you govern default entry points without creating confusion?

A: Use explicit rule ordering, limit overlap, and define one default path for unmatched users. Then review those rules whenever organisational roles, onboarding paths, or governance priorities change. Clear precedence matters because users experience the first matching rule, not the one that seems most intuitive after the fact.


How it works in practice

Role-based homepage assignment and landing-page rules

The custom homepage assignment feature works as a rule engine for entry points. Administrators map a page URL to a user, group, or role, and the platform evaluates those mappings top to bottom so the first match wins. Because the product excludes conflicts when a group or role is already used in an earlier rule, the logic is deterministic rather than ad hoc. That matters in large governance programmes where different personas need different defaults, such as stewards going to tasks while business users go to the Data Marketplace.

Practical implication: model homepage assignment as part of access governance, not a cosmetic preference list.

Page builder widgets and configurable homepage structure

The new homepage experience is built on a page builder that separates layout from content. Sections and rows define structure, while widgets add functions such as search, workflows, tasks, issues, scorecards, cards, and embedded data views. In practice, this turns the homepage into an operational console that can surface governance state at login. The important technical shift is that the landing page now becomes a configurable orchestration layer for content and workflow, rather than a fixed navigation surface.

Practical implication: decide which governance signals belong at login and configure them as reusable widgets, not one-off dashboards.

Draft, preview, publish, and restore controls for homepage changes

The draft and preview workflow creates a safe change-management boundary. Administrators can build and test homepage changes without affecting end users until publish occurs, and they can restore the default if a layout creates confusion. That is a subtle but important control for environments where landing-page changes can affect adoption, support burden, and user pathing. It also means homepage governance needs version control discipline, because the default entry point is now a managed configuration object with operational impact.

Practical implication: apply release discipline to homepage changes the same way you would to permission or workflow changes.


NHI Mgmt Group analysis

Homepage design has become a governance control point, not a presentation layer. When a platform's first screen determines whether users reach tasks, scorecards, or search, the landing page influences how identity, access, and workflow are experienced in practice. That makes entry-point control part of programme design, especially where role-based adoption matters across data stewardship, analytics, and executive oversight. Practitioners should treat homepage routing as a governed control surface.

Role-based UX is an access-adjacent control because it changes what users can reach efficiently. If every user is funneled through the same default entry point, the organisation compensates with training, bookmarks, and manual guidance. Collibra's assignment logic reduces that friction by aligning default entry points with user roles and groups, which can improve adoption and reduce navigation waste. The practitioner conclusion is that user context should inform the first mile of platform access.

Persona-driven navigation exposes a familiar governance assumption: users can self-navigate to the right content after login. That assumption was designed for a generic portal with stable, shared workflows. It fails when the platform serves distinct operating personas that need different starting points, because the first screen becomes part of the control path rather than a convenience. The implication is that governance teams must rethink default-entry assumptions, not just add more links.

Custom landing-page rules create a new source of operational drift if they are not governed like entitlement policy. Landing-page precedence, group exclusion, and default-page selection can all alter how users experience the platform without changing their formal permissions. That means misconfiguration can hide critical workflows or delay access to them even when authorisation is correct. Practitioner implication: review landing-page rules as a governed configuration set, alongside access and workflow policy.

Named concept: entry-point governance debt. A shared homepage accumulates debt when it forces every persona through the same experience even though their work differs. Over time, that debt shows up as slower onboarding, lower self-service use, and more support friction. The platform change is useful because it reduces that debt, but only if teams govern the homepage with the same seriousness they apply to access and workflow design.

From our research:

What this signals

The immediate signal for practitioners is that platform entry points are now part of the governance architecture, not just the user interface. As role-based experiences become more common, teams need to decide which defaults belong to onboarding, which belong to steady-state work, and which should be governed like entitlements. That shift is especially relevant for programmes that already use Top 10 NHI Issues to frame risk across access, lifecycle, and oversight.

Entry-point governance debt: shared landing pages create hidden friction when different personas require different starting points. The more complex the organisation, the more likely users will rely on bookmarks, support, or informal navigation rather than the designed path. The practical response is to align the first screen with the role, then review it using the same discipline applied to access review and workflow change.

For identity and security teams, the broader lesson is that usability and governance are converging. The NIST Cybersecurity Framework 2.0 is useful here because the homepage now affects identify, protect, and respond workflows in day-to-day operations. If the entry point is wrong, governance can still exist, but users will experience it later and less consistently.


For practitioners

  • Map homepage defaults to personas and roles Define which user groups should land on the governance homepage, the Data Marketplace, or an onboarding view, then document the rule order so first-match precedence is deliberate.
  • Treat homepage changes as governed releases Use draft and preview before publish, and keep a rollback path ready so a layout change does not disrupt users who rely on the homepage for daily workflows.
  • Review landing-page rules alongside access reviews Check whether the default entry point still matches each role's actual operating needs, especially after reorganisations, new programmes, or role changes.
  • Surface the right governance signals above the fold Place scorecards, tasks, issues, and search where they reduce navigation friction for the intended persona instead of overloading the homepage with every available widget.

Key takeaways

  • Collibra's release turns the homepage into a governed entry point that can materially shape how users experience access, workflow, and adoption.
  • Role-based landing-page assignment reduces navigation friction, but it also creates a configuration surface that must be reviewed like policy.
  • Practitioners should govern homepage defaults, rule precedence, and rollback paths with the same discipline they apply to other access-adjacent controls.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST CSF 2.0, NIST Zero Trust (SP 800-207) and NIST CSF 2.0 set the governance and control requirements practitioners need to meet.

FrameworkControl / ReferenceRelevance
NIST CSF 2.0PR.AC-4Role-based landing pages affect how users reach governed functions.
NIST Zero Trust (SP 800-207)AC-6Least-privilege principles apply to what users see first and reach fastest.
NIST CSF 2.0GV.OV-01Homepage changes need governance oversight because they affect user experience.

Treat landing-page configuration as a governed change requiring review and rollback planning.


Key terms

  • Role-Based Homepage: A role-based homepage is a configurable landing page that changes what users see first based on their role, group, or user context. It is a governance pattern as much as a UX pattern because it shapes how quickly people reach tasks, dashboards, and workflows that matter to their job.
  • Landing-Page Precedence: Landing-page precedence is the ordered logic that decides which homepage rule applies when more than one rule could match a user. In governed environments, precedence must be explicit because the first matching rule controls the user's entry point, and poorly managed ordering can create confusion or hidden drift.
  • Entry-Point Governance Debt: Entry-point governance debt is the accumulation of friction caused when one default homepage is expected to serve multiple personas with different needs. Over time, users work around the design with bookmarks, support requests, or manual navigation, which weakens adoption and makes governance less visible in practice.

Deepen your knowledge

NHI governance, agentic AI identity, and machine identity lifecycle are core topics in our NHI Foundation Level course, the industry's only accredited NHI security programme. If you are responsible for identity security strategy or NHI governance in your organisation, it is worth exploring.

This post draws on content published by Collibra: Take control of your Collibra homepage experience. Read the original.

NHIMG Editorial Note
Published by the NHIMG editorial team on 2026-06-26.
NHI Mgmt Group — the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org