Out-of-Band Access
Out-of-Band Access is access that exists or is granted outside the normal governed request and provisioning process.
- Synonym
- Shadow Access
Definition
Out-of-Band Access refers to permissions, accounts, or access paths that are created, changed, or retained outside the expected IAM control flow. Because such access often escapes normal approval, certification, and reconciliation processes, it can become a major source of hidden risk.
Why it matters
Out-of-Band Access is a primary source of hidden risk because it bypasses normal governance controls.
The Ariovis perspective
Exceptional access should be explicit, approved, time-bound and reviewed. It should not become permanent simply because the original request was never revisited.
Related services
Common pitfalls
- A common pitfall is assuming that all access goes through the governed process while significant out-of-band paths remain undetected.
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.