Know what you may do
See the task, scope, limits, source and end date of authority you receive—or give to someone else.
Explore the individual experience →Controlled authority · For people and organisations
Understand authority.
Keep control.
Understand and control the authority you give and receive. Organisations can turn that authority into scoped, time-bound and accountable access.
AUTHORITY GIVENPERSON ACTINGPERMITTED ACTIONWHO · WHAT · WHERE
WHEN · WHY · AUTHORISER
WHEN · WHY · AUTHORISER
Choose your perspective
Authority should be understandable before it becomes technical.
Govern how authority becomes access
Use policy, approval, expiry, review and evidence across existing identity and application platforms.
Explore organisation capabilities →Use Delegance independently or connect trusted evidence from DiligenceID and continuous assurance from Vigilance around a broader authority journey.
The business problem
Access accumulates. Authority is rarely reviewed.
These are well-understood patterns across enterprise and government organisations, not edge cases.
Role explosion and privilege creep
Permissions accumulate as people change teams and projects, and are rarely removed once the original need has passed.
Temporary and acting access
Temporary staff, and people covering a role while its substantive holder is on leave or secondment, need authority that should end automatically but often doesn't.
Delegated financial authority
Spend thresholds, invoice approvals and other delegated financial authority are often enforced by trust and memory rather than by policy.
Supplier, project and cross-organisational access
Suppliers, project teams and people from partner organisations need scoped access into systems they do not own, distinct from simply representing their own employer.
Access reviews nobody can complete
Reviewers are asked to approve long lists of entitlements they do not understand, which turns a control into a formality.
Manual, ticket-driven provisioning
Central IT queues process access requests by pattern-matching rather than business judgement, slowing down the people waiting on access.
The leadership issue
Delegation is unavoidable.
Uncontrolled delegation is a risk.
Access becomes broad, permanent and opaque
- Business authority is translated manually by IT
- Privileged roles accumulate standing access
- External parties inherit internal-style administration
- Auditors can see access but not always the authority behind it
Authority becomes explicit and governed
- Scope, purpose, owner and duration are recorded
- Roles and attributes constrain policy decisions
- Reviews, expiry and revocation are designed in
- Evidence connects approval to action
Policy model
From identity to an authorised action.
Delegance separates identity, access, authority, delegation and the final decision so every control has a clear job.
Decision context
Resolve the questions behind the permission.
Control outcomes
Give the business room to act—inside deliberate boundaries.
Reduce standing privilege
Replace blanket administration with task, resource and time-bound authority where platforms support it.
Clarify accountability
Keep business ownership, technical enforcement and approval responsibility visible.
Make decisions reviewable
Show which role, attributes, policy and delegation produced a material entitlement.
Close the lifecycle
Design expiry, certification, revocation and exception handling alongside activation.
Keep the business moving
Self-service, policy-governed delegation mobilises contractors and project teams faster and cuts the manual, ticket-driven access requests that slow everyone down.
RBAC + ABAC + delegation
Three controls. Three different questions.
Where it fits
Govern authority across different platforms.
MAITS maps the control surfaces available in each target and builds the integration needed to enforce scope, expiry and accountable authority.
MAITS managed service
Software controls need an operating model.
Map authority
Define roles, attributes, owners, approval chains and separation of duties, typically captured in a policy model document agreed with business and technical stakeholders.
Integrate platforms
Translate governed decisions into the controls exposed by identity and application platforms, with an integration and runbook artefact describing how each control point is configured and operated.
Review and improve
Run expiry, certification, exceptions and evidence against a defined review cadence with named business and technical owners, refining the model as roles and platforms change.
MAITS product family
Evidence. Authority. Assurance.
Use each proposition independently or combine them around a broader trust journey.
What evidence can this person or organisation prove? DiligenceID's verified evidence can support a Delegance approval decision where an entitlement depends on proving who someone is or what they represent.
Explore DiligenceID →Who is authorised to act, where and for how long?
How do we know when trust or access is at risk? Vigilance can provide ongoing monitoring of active delegations for anomalous use, complementing the review and revocation controls in Delegance.
Explore Vigilance →Frequently asked questions
Delegance, without the ambiguity.
How does Delegance relate to authentication?
Authentication establishes identity. Delegance governs the authority to act and the access needed for that action.
How does Delegance work with Microsoft Entra?
It uses and extends controls in Microsoft Entra and other platforms while keeping business authority and governance explicit.
How is Delegance delivered?
MAITS designs and implements access delegation and governance around the platforms and control surfaces in each customer environment.
What is the difference between access and authority?
Access is a technical capability. Authority explains why a person is permitted to use it, who approved it, for which purpose and for how long.
Next step
Start with one authority chain.
Bring the action, owner, current access path and risk. MAITS can map a delegation model that fits the platforms you already operate.
Discuss Delegance →