IT operations management is a visibility discipline, not an identity control plane. Zluri's roundup reinforces a familiar market pattern: ITOM tooling is built to monitor systems, not to govern the identities operating inside them. That distinction matters because many security programmes still blur operational telemetry with access governance. The practical conclusion is that identity teams must treat ITOM as input, not authority.
A question worth separating out:
Q: What is the difference between observability and access control in identity programmes?
A: Observability tells you what is happening, while access control determines what identities are allowed to do. In practice, that means monitoring can highlight a problem, but only governance can prevent, limit, or retire the access that created it. Organisations need both, but they solve different problems.
👉 Read our full editorial: IT operations management tools in 2026 and identity risk