Identity & Access Management (IAM), should be the core framework from which a modern firm builds its IT operations. IAM is more than just collection of security principles, although it serves effectively in that regard as well. IAM is a philosophy to empower organizations and their users through centralized provisioning, in accordance with business roles.