Topic starter
22/09/2026 3:28 pm
TL;DR: Gartner’s new Identity Visibility and Intelligence Platform category formalises a layer for aggregating identity, entitlement, and activity data across fragmented environments, with Oleria listed as a Representative Provider, according to Oleria Security. The practical shift is that continuous visibility and action on human, non-human, and AI identities is becoming a governance requirement, not an optional IAM add-on.
Editorial analysis by NHI Mgmt Group, based on content published by Oleria Security: “Gartner® named a new identity category. Here's why I think it matters.”.
Key questions
Q: What breaks when external identity data is spread across multiple systems?
A: When external identity data is fragmented, teams lose a reliable view of who has access, who approved it, and whether the relationship is still active.
Q: When should organisations prioritise discovery over access reviews?
A: Discovery should come first whenever the team cannot confidently map all applications, identities, and entitlements in scope.
Q: How do IAM teams know whether identity governance is actually working?
A: Look for low numbers of orphaned accounts, timely rotation of credentials, clear ownership for every identity type, and access reviews that result in real removals rather than exceptions.
Practitioner guidance
- Map your identity graph across all control planes Inventory where identity, entitlement, control, and activity data currently lives across IGA, PAM, cloud IAM, SaaS, and any AI agent control points.
- Use activity data in governance decisions Require actual usage evidence alongside entitlement data when prioritising revocation, recertification, and exception handling.
- Test whether current controls see non-human identities Validate that service accounts, workloads, AI agents, and other non-human identities appear in the same operational view as human users.
Bottom line: Fragmented identity data is now the limiting factor in governance, not the number of point tools in the stack.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 week ago by NHI Mgmt Group
22/09/2026 3:29 pm
Identity visibility is becoming the missing governance layer above IGA, PAM, and cloud IAM: the article captures a structural shift, not a product trend. When identity data is split across systems that were never designed to be jointly interpreted, certification and provisioning alone cannot establish governance certainty. The implication is that teams need an operational layer that turns fragmented identity signals into a usable control plane.
A few things that frame the scale:
- 70% of organisations grant AI systems more access than they would give a human employee performing the exact same job, according to the 2026 Infrastructure Identity Survey.
- 53% of security leaders expect AI to run major portions of their infrastructure autonomously within the next three years, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
A: Security teams should treat non-human IAM as a distinct programme, not a side effect of human identity management. Start by inventorying workload identities, replacing hard-coded secrets and manual sharing, and standardising rotation and access policies. In hybrid and multi-cloud environments, consistent governance matters most because fragmentation creates blind spots, over-privilege, and inconsistent enforcement across critical systems.
👉 Read our full editorial: Identity visibility and intelligence is becoming the new IAM layer
This post was modified 1 week ago by NHI Mgmt Group