To meet legal and regulatory requirements for insurance companies, Pax Schweizerische Lebensversicherungs-Gesellschaft AG, based in Basel, has been using a SailPoint Identity & Access Management (IAM) solution for over five years. While IdentityIQ was the best fit for Pax's requirements at the time, it became clear even before implementation that IdentityIQ couldn't address Pax's key needs regarding role mining and role modeling.

Consequently, the project leadership at the time decided to evaluate and implement additional role management software. Their choice was the predecessor of today's R&D RoleManager, which already stood out for its comprehensive functionality, user-friendly interface, and clear overview.

Parallel to the SailPoint IAM implementation, organizational and functional business roles were modeled within weeks, including assignment rules incorporated into the IAM system, enabling role-based permission assignments from the outset. Continuous maintenance of business roles during operations was also considered, with the RoleManager implemented to allow immediate editing of roles when changes were needed, followed by updates in the IAM system.

When Pax underwent major organizational changes in 2017, the importance of ongoing role maintenance became evident. Using the RoleManager, Pax ensured smooth implementation of necessary role modifications for the restructuring. New roles matching the revised organizational structure were modeled and deployed to the SailPoint IAM system, with rules ensuring employees' old roles were automatically replaced with new valid ones on the effective date. Roland Ingold, Head of IT Operations, is convinced this seamless transition wouldn't have been possible without the R&D RoleManager.

Beyond modeling new and maintaining existing business roles, the RoleManager proves indispensable for quality assurance of SailPoint IAM system data. During daily imports of role and permission data from IdentityIQ, the RoleManager alerts when discrepancies occur between defined target states and actual role/permission assignments. Such discrepancies might include employees having unauthorized roles, missing required roles, permission assignments for departed employees, or erroneous manual role changes in the IAM system.

These examples demonstrate how role management implementation has delivered significant benefits to Pax Insurance over the years, as acknowledged by André Ruf, Pax's IAM Manager:

"The R&D RoleManager enables highly efficient role management. We can quickly create new roles and promptly modify existing ones as needed."

Pax considers itself well-prepared for the future with the R&D RoleManager. Having proven its excellence in meeting all role management requirements over the years, Roland Ingold wouldn't consider abandoning it for either role modeling or maintenance.

About the Pax Group

The Pax Group operates under the cooperative umbrella of Pax Holding (Cooperative) based in Basel. It comprises Pax Schweizerische Lebensversicherungs-Gesellschaft AG (Pax Insurance), Creadi AG, and Pax Asset Management AG. Pax Insurance provides tailored solutions for private and occupational pension provision, distributed through independent partners. Creadi AG develops digital offerings for insurers, primarily in private pension provision. Pax Asset Management AG manages investment assets and Pax's real estate portfolio.

Interested in more details about this project? Contact us today!