Identity and access management is all about knowing who is on your system, what restrictions apply to users, and how others might infiltrate that system.