ExxonMobil shares their journey to broad attribute-based access control

In today’s rapidly evolving digital landscape, organizations face the critical challenge of managing access to their systems and data efficiently. Role-based access control (RBAC) has been a popular approach, but it often involves manual processes, leading to delays and inefficiencies. ExxonMobil is moving beyond requestable RBAC to broad, auto-provisioned access roles, based on the identity attributes of each user. Attribute-based access control (ABAC) considers individual attributes such as organization, job role, worker type, and location. This dynamic model allows for fine-grained access decisions, reducing the administrative burden and enhancing security. Join Brandon Rogers, Senior Principal Enterprise Architect – Identity & Access Management and Ramesh Kopparapu IGA Solution Architect, as they share ExxonMobil’s journey from a customized role approach to full and broad ABAC by 2028. The team will share strategies employed to overcome cultural resistance, technological hurdles, and mindset shifts around identity and access management (IAM) that are at the heart of this transformation. Challenges that still lie ahead, and plans to address them, will also be discussed.