The management team notices that new accounts that are set up manually do not always have correct access or permissions. Which of the following automation techniques should a systems administrator use to streamline account creation?

User provisioning encompasses the processes and tools for creating, managing, and

deleting user accounts and their access privileges. A user provisioning script

automates these tasks, ensuring consistency and adherence to predefined access

policies, thereby addressing the issue of incorrect access or permissions in manually

set up accounts. This aligns with the core problem of streamlining account creation and

ensuring correct access.

A. Guard rail script: Guardrails are typically high-level preventative or detective

controls that enforce policies, often in cloud environments (e.g., preventing creation of

overly permissive S3 buckets). They don't directly automate the creation of user

accounts themselves.

B. Ticketing workflow: A ticketing workflow manages and tracks requests, including

those for new accounts. While it's part of the overall process, it doesn't perform the

actual account creation or permission assignment; the provisioning script would be

triggered or managed by this workflow.

C. Escalation script: An escalation script is designed to elevate issues or incidents that

cannot be resolved at a lower support tier. It is not used for routine account creation.

For User Provisioning:

Microsoft Entra ID (formerly Azure AD) documentation often discusses user provisioning.

For example, "Provisioning is the process of creating user accounts and mailboxes in

Microsoft 365." While this is product-specific, the general concept of provisioning as

creating and managing user accounts is standard.

Source: Microsoft Learn. "Overview of user and group provisioning with Microsoft

Entra ID" (Though a general concept, a specific stable URL to a definition is hard to

pin, but the term is widely used in their identity management documentation).

Specifics: The concept is foundational in identity management services described by

vendors like Microsoft.

NIST Special Publication 800-53, Revision 5, "Security and Privacy Controls for

Information Systems and Organizations," discusses account management (AC-2),

which includes provisioning.

URL: https://doi.org/10.6028/NIST.SP.800-53r5

Specifics: Section on "Account Management (AC-2)" details the requirements for

establishing, activating, modifying, reviewing, disabling, and removing accounts, which

is the essence of provisioning. Automation of these tasks via scripting is a common

implementation.

For Guardrails (as distinct from provisioning):

AWS Well-Architected Framework often refers to guardrails in the context of governance

and control.

URL: (General Concept) AWS Whitepapers & Guides - search for "Well-Architected

Framework" and "Guardrails". For instance, the "AWS Well-Architected Framework -

Security Pillar" whitepaper.

Specifics: Guardrails are described as high-level rules that provide ongoing

governance, e.g., "Implement guardrails that align with your compliance requirements

and security policies." This is broader than the specific act of account creation

automation.

For Ticketing Workflow:

ITIL (Information Technology Infrastructure Library) framework, often referenced in

academic and professional IT service management contexts, describes incident and

service request management, which use ticketing systems.

Note: Direct links to ITIL core books are typically not free. However, university

courseware on IT Service Management will cover this.

Specifics: Ticketing systems manage the lifecycle of requests, but the automation of the

fulfillment of a new account request would be a separate provisioning script/process.

For Escalation:

Similar to ticketing, ITIL and general IT operations documentation describe escalation

procedures for incident management.

Specifics: Escalation is a reactive process for unresolved issues, not a proactive

automation for account setup.