Topic starter
10/06/2026 11:39 pm
TL;DR: Graph-based identity models help organisations map relationships between identities, permissions, systems, and facilities for faster access analysis, role mining, and toxic-role detection, according to Gathid. The governance shift is less about visualisation and more about making complex entitlement paths reviewable before they turn into compliance and security failures.
Editorial analysis by NHI Mgmt Group, based on content published by Gathid: “Unleashing the Power of Graph Models in Identity Governance”.
Key questions
Q: How should IAM teams use identity graphs to improve access reviews?
A: IAM teams should use identity graphs to trace how access is inherited, combined and propagated across systems before they certify it.
Q: What breaks when toxic role combinations are only checked per application?
A: Cross-system conflicts survive because each application may appear compliant on its own while the combined access path creates excessive privilege or segregation-of-duties failure.
Q: How do identity graphs support role mining in complex environments?
A: They let teams compare large numbers of user-to-resource relationships and identify repeated patterns that can become roles or policy rules.
Practitioner guidance
- Build a relationship model for identity data Connect users, roles, permissions, systems and sensitive resources into a traversable graph so reviewers can trace entitlement paths across environments.
- Use graph analysis for role mining Compare recurring user-to-resource patterns to identify role candidates, outliers and permissions that no longer fit current business structure.
- Map toxic role rules across applications Evaluate segregation-of-duties conflicts against the combined graph so a risky permission pair is visible even when each application looks compliant alone.
Bottom line: Identity graph technology matters because it makes complex entitlement relationships queryable across systems, rather than forcing teams to infer them from disconnected reports.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
12/06/2026 5:55 am
Identity graphs solve an entitlement visibility problem, not a visualisation problem: the real governance issue is whether teams can follow access relationships far enough to explain why a user, service or facility has a permission at all. Static reports struggle when access spans cloud, on-premises and legacy systems. A graph makes the path queryable, which is why it changes review quality rather than just dashboard design. Practitioners should treat graph modelling as a governance control layer for complex entitlement analysis.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
- Nearly 60% of IT leaders cite restrictive cost and complexity as a weakness of legacy identity governance, according to the 2025 State of Identity Governance Report.
A question worth separating out:
Q: What is the difference between role mining and access certification?
A: Role mining is the process of inferring role patterns from actual entitlement relationships, while access certification is the governance step of reviewing whether existing access should remain in place. They solve different problems, so a graph can help with both but should not collapse them into one control.
👉 Read our full editorial: Graph technology is reshaping identity governance visibility and access analysis
This post was modified 1 day ago by NHI Mgmt Group