Identity and Access Management Capability Model
A two-level capability model with around 145 identity and access management capabilities, in editable PowerPoint, Excel and Word, with bonus reference material.
About This Capability Model
The One Capability Model That Belongs to Nobody
Identity and Access Management Capability Model is a structured two-level model of around 145 IAM capabilities — identity lifecycle, authentication, authorization, governance, privileged access — in editable PowerPoint, Excel and Word, with bonus reference material.
Identity and access management has an organizational problem that shows up as a technology problem. Joiner-mover-leaver belongs to HR and IT; access certification belongs to risk and audit; privileged access belongs to infrastructure; customer identity belongs to the digital team. Each owns a piece, and the seams between them are where access accumulates and never gets removed.
A capability model is the cheapest way to see the whole domain at once. It says what has to be done, without asserting who does it or what tool does it — which is precisely what allows four functions with four budgets to have one conversation.
Unlike the sector models in this catalog, IAM is horizontal. The same model applies whether you are a bank, an insurer or an asset manager, which makes it useful as a common reference across a group that has standardized on very little else.
What a Capability Model Settles
Three arguments that are unresolvable without one.
What is actually in scope for the IAM program? Programs start on provisioning, discover certification, then discover privileged access. A model states the whole domain up front so the scope decision is deliberate rather than incremental.
Who owns which capability? Ownership disputes are easier to settle against a neutral list of capabilities than against a list of tools, because nobody has a budget attached to a capability yet.
Where does the tooling actually overlap? Most organizations own several products with overlapping claims. Mapping each to capabilities is what makes consolidation an evidenced decision rather than a preference.
Why This Matters Now
Three pressures are converging on a domain that most firms have never mapped end to end.
Identity Is the Control Plane
As perimeters dissolve, access decisions carry the weight that network controls used to. That raises the cost of the capabilities nobody owns.
Non-Human Identities Now Outnumber People
Service accounts, workloads, agents and API credentials are the fastest-growing population, and most identity programs were designed around employees.
Certification Is an Audit Finding Waiting to Happen
Access review is the capability most commonly performed as a periodic spreadsheet exercise. Naming it as a capability is the first step to treating it as one.
The core deliverablesWhat Is Included
Two archives:
Who This Is Built For
This is a capability model — what has to be done. It does not prescribe technology, and it does not say who in your organization should own each capability.
How to Put It to Work
- Heat-map current maturity across the model to produce a scoped program rather than a tool list.
- Map every identity product you own to the capabilities it actually covers, and find the overlaps.
- Assign an owner per capability, which is a shorter conversation than assigning owners per tool.
- Use the Excel version as the working artifact and the PowerPoint version for the steering committee.
Where Teams Typically Start
Scoping an IAM program. Decide what is in and out against the whole domain rather than discovering scope in phase two.
Rationalizing identity tooling. Map products to capabilities to make consolidation an evidenced decision.
Settling ownership. Assign capabilities across HR, IT, risk and digital before the budget conversation, not during it.
Building a maturity baseline. Score current state once, then use the same model to show movement.
What You Are Actually Buying Is Time
Building a 145-capability model from scratch means weeks of workshops with four functions who each see a different part of the domain and use different words for the shared parts.
- You edit rather than originate. The capabilities are drafted; your effort goes to your organizational structure, your regulatory environment, and your terminology.
- Arguing with a draft is faster. A workshop given a proposed model converges quickly. The same workshop given a blank page spends its time on scope.
- It stays useful. The same model serves program scoping, tool rationalization and an annual maturity baseline.
Workshops across security, infrastructure, HR, risk and digital.
An identity assessment engagement producing a comparable model.
Immediate download. Editable in three formats. Take it into your next working session.
Those first two columns describe what comparable efforts tend to involve, not a quoted benchmark — your figures depend on scope and who does the work.
Built From Real Engagements
We are software entrepreneurs and business consultants who have delivered business architecture and transformation work across financial services firms. This model is the distilled, reusable output of that work rather than a theoretical exercise — which is also why it carries the limits described below.
Read before you buyAn Honest Note on Fit
This is a generic model designed as a starting point. Customization is expected, not a sign that something went wrong.
Specifically:
Terms You Should Know Before Purchasing
Read the description above in full before you buy. Delivery is immediate and the files are yours to keep, which is also why we cannot take returns, issue refunds, or swap a purchase for a different product once it has been downloaded. What you receive is what is listed — no warranty beyond that, and no bundled customization, implementation help, or support. A Enterprise License covers everyone inside one organization; if you intend to reuse the material across several clients, the Consultancy License is the one you need. The full digital product terms govern the sale.
What's Included
At a Glance
- ~145 IAM capabilities, decomposed to two levels
- Editable PowerPoint, Excel and Word
- Plus bonus reference files
Enterprise License
Consultancy License
All sales are final. No refunds. No returns.
Digital products are delivered instantly upon payment.
Sign up for Finantrix Insights for periodic updates of new and notable.
Protected by reCAPTCHA. No spam. Unsubscribe anytime.
The Finantrix Store sells reusable business-architecture reference deliverables — capability models, data models, and value-stream maps — built for financial-services strategy and technology teams.
Browse the full Store →Before You Buy
The questions worth settling first. Still unsure? Email us before purchasing — all sales are final.
What exactly do I receive?
The files listed under "What's Included" on the product page, and nothing beyond them. Most products are editable PowerPoint, Excel, and Word documents; some are supplied as archives containing those files. Delivery is immediate — a download link is issued as soon as payment completes.
Are the files editable, or locked?
Editable. They are working documents in their native formats, not locked PDFs or images, because the point of the product is that you customize it. A few reference guides are supplied as PDF where editing them would serve no purpose.
How long is my download link valid?
Links stay active for 7 days after purchase and allow up to 3 downloads. Save the files somewhere durable when you receive them. If a link expires or you run out of downloads, email support@finantrix.com and we will issue a new one — that is a support request, not a repurchase.
What is the difference between the Enterprise and Consultancy licenses?
An Enterprise License covers use anywhere within a single organization — your colleagues can all work from the material. A Consultancy License covers use across multiple client engagements, which the Enterprise License does not permit. If you advise more than one organization, the Consultancy License is the one you need. Full terms are at /legal/digital-products-terms.
Do I get a receipt and proof of license?
Yes, both, automatically. Your order confirmation email links to a purchase receipt and a license certificate, and normally carries them as PDF attachments as well. Unlike the download link, those documents do not expire and opening them does not use up one of your 3 downloads — they are there for expense claims, accounting, and procurement reviews that arrive long after the files do. Finantrix collects no sales tax or VAT, so the receipt shows the tax line as not applicable rather than as a computed amount.
Can I get a refund?
No. These are digital products delivered immediately and in full, so all sales are final — no returns, refunds, or exchanges once a purchase completes. That is why every product page carries a detailed manifest and an honest note on fit: we would rather you decide correctly before buying than be disappointed afterwards. If you are unsure whether a product suits your situation, email support@finantrix.com before purchasing and we will tell you.
How much customization should I expect to do?
A meaningful amount, and that is by design. These are generic, sector-level artifacts intended as a substantial head start rather than a finished deliverable for your organization. Each product page includes an honest note on fit setting out, deliverable by deliverable, what is complete and what you will need to supply.
Is implementation help or support included?
No. The purchase covers the files only — it does not include customization, implementation assistance, training, or consulting. Our consulting team is available separately on a paid basis if you want deeper help; contact us to discuss scope.
Do you offer a preview or sample before purchase?
Not as a downloadable sample. The product page is the preview: it lists every file, states the capability counts and levels of decomposition, and sets out where the artifact stops. If something specific would settle your decision, email support@finantrix.com and ask.
Can I share the files with colleagues or clients?
Colleagues within your organization, yes, under the Enterprise License. Clients, no — that requires a Consultancy License. Redistribution, resale, or publishing the material publicly is not permitted under either license.
How current is the content?
The artifacts describe business structure — capabilities, value streams, information entities — which changes far more slowly than technology or regulation. Where a product includes market-facing material such as vendor profiles, the product page says so and advises verifying currency before relying on it for a decision.