Identity & Access Governance Council

The IAGC serves two primary purposes:

• Support information gathering and sharing activities
• Functional decision-making authority related to requests for modifications to identity lifecycle rules, access structures, identity data attributes, and provisioning logic

Governance Outcomes

• Purpose - Identity & Access Governance Council will enable system-wide governance and strategic identity management.
• Collaboration - The effort centers on collaborative information sharing, decision-making, and governance.
• Alignment - Alignment prevents fragmented identity decisions across diverse institutions, ensuring consistent access and data quality.
• Decision-Making - Timely informed decisions on governance and priorities avoid project delays and reduce operational risks.
• Enablement - Clear governance and collective decisions empower teams to confidently implement solutions and communicate changes.

Collaboration Principles

• Fostering Trust and Efficiency - The committee emphasizes trust and efficient collaboration to optimize decisions impacting multiple groups.
• Respecting Time and Agendas - Clear agendas and focused meetings respect members' time amidst competing responsibilities.
• Encouraging Open Dialogue - Open dialogue invites questions, challenges assumptions, and allows expressing concerns without judgment.
• Progress Over Perfection - The group values learning and adapting over flawless decisions, embracing uncertainty and growth.

Membership

Member Responsibilities

• Information Sharing - Members participate in information gathering sessions to help inform project design and implementation needs.
• Decision-Making Role - Members act as decision-makers representing their organizations, not just observers.
• Effective Representation - Members communicate current processes and anticipate impacts to accurately represent their areas.
• Maintaining Continuity - Members ensure project continuity throughout its lifecycle by active participation and follow-up.
• Communication and Accountability - Clear communication across stakeholder groups and accountability help translate council decisions into coordinated actions.

Governance Model and Structure

Scope of Responsibility

• Requests for modifications to identity lifecycle rules, access structures, identity data attributes, and provisioning logic.
• Changes to this group, including membership, process, and structure.
• Support information gathering and sharing activities.

Decision Making Process

• A request is reviewed by the Technology & Policy group for technical feasibility, security, privacy, compliance, and other dependencies.
• Impacted groups of the 3 identified (Student, Employees, and Affiliates) will vote and approve a decision based on the individual approval structures defined in each group.
• A simple majority is required for a decision to be approved.
• In the event of a failed decision or consensus that an outside decision is needed, then an outside decision will be pursued.  Committee Chair will bring the issue and vote to the appropriate governing body.

Approval Structure

Employee

• There is 1 vote per organization.
• Decisions are made by a simple majority. If a tie occurs, the simple majority process continues until one wins.
• Once the group reaches a consensus, they cast one collective vote to the broader IAGC.
• Decision makers are also expected to share information across different teams and stakeholders.

Student

• There is 1 vote per organization.
• Decisions require unanimous voting to decide. This means all three voting organizations must agree for a decision to pass.
• Once the group reaches a consensus, they cast one collective vote to the broader IAGC.
• Decision makers are also expected to share information across different teams and stakeholders.

Affiliate

• There is 1 vote per Represented Category/Functional Area (e.g., Research Park, Vendors, Visiting Scholars)
• Decisions are made by a simple majority. If a tie occurs, the simple majority process continues until one wins.
• Once the  group reaches a consensus, they cast one collective vote to the broader IAGC.

Decision makers are expected to share information across their specific functional teams and stakeholders.