* Commonly used in small to medium-sized organizations, this approach allows a network administrator to decide which applications and data users can access.

* This approach generally helps reduce an administrator's workload. It allows users to participate in some parts of the provisioning process, such as requesting an account and requesting self-managed password resets.

* Approval from designated approvers is required before a user is granted access to an application or data. For example, the organization's chief financial officer may need to approve access to a financial management system.

* Each account is added consistently through a centralized management application interface.
* This streamlines the process of adding and managing user credentials and gives administrators a more accurate way to track who has access to specific applications and data sources.
* Although provisioning and identity management processes may be similar, the scale and type of provisioning can vary significantly among different users, such as patients, doctors, customers, and partners.