Schema & ERD

Master registry of all employees or persons tracked within the governance system. Serves as the identity anchor for all system accounts.

Catalogue of all IT systems subject to access governance. Each system has a unique code and is associated with an owner.

Junction entity linking a person to a system. Represents the actual account an employee holds on a given IT system.

Catalogue of permissions, roles, or access rights that can be granted within a given system. Each entitlement belongs to one system.

Stores risk/sensitivity classifications for entitlements with effective-dating, enabling classification history tracking.

Core assignment entity recording which entitlements have been granted to which accounts. Captures the full assignment lifecycle.

Tracks every data import operation, providing a complete audit trail for all records loaded from external sources.

Records all access requests submitted by or on behalf of users. Captures the full workflow from submission through approval to implementation.

Centralized reference table for configurable values used across the system — status codes, types, and roles.