Common data model for identity access management data

A computer-implemented method for managing identity and access management (IAM) data comprising:

• implementing, at a data store, an IAM data model that models at least a portion of the IAM domain space and provides a common IAM data format;
• receiving heterogeneous IAM data from a plurality of IAM data sources;
• mapping the heterogeneous IAM data based on the IAM data model in order to obtain homogeneous IAM data formatted according to the common IAM data format;
• and
• storing the homogeneous IAM data at the data store in accordance with the IAM data model.

A data model for managing identity and access management (IAM) data implemented at an electronic database comprising:

• a set of logical resource elements that model logical resources of an enterprise;
• a set of physical resource elements that model physical resources of the enterprise;
• a set of access request elements that model access requests received at an access request manager of the enterprise;
• and
• wherein individual physical resource elements of the set of physical resource elements are respectively associated with one or more of the logical resource elements of the set of logical resource elements such that access rights for one or more of the physical resources are obtainable based on a logical resource specified in an access request.