Wiz Adds Custom Roles for Granular Cloud Permission Management
Summary
Wiz says its new Custom Roles feature lets organizations tailor cloud permissions, identify missing permissions and track changes to built-in roles without automatically activating new permissions.
Key points
- Custom Roles extend Wiz’s existing role-based access control model, allowing organizations to tailor permissions to business needs.
- The feature can show which permissions are missing from a custom role.
- Wiz says it tracks permission changes to built-in roles and notifies users; newly added permissions are not automatically enabled in custom roles.
- The article presents least-privilege access and limiting unnecessary access to sensitive data as intended benefits.
Article Details
- Event Type
- Product feature announcement
- Impact
- Wiz introduced Custom Roles, an extension of its RBAC model that lets organizations define granular permissions, identify missing permissions, and receive notifications when vendors change built-in role permissions. The feature is intended to support least-privilege access and reduce over-permissioning; the article does not report a security incident or measured impact.
Vendors
Products
Industries
financeMoreover, in industries where compliance is critical, such as finance or healthcare, Custom Roles provide a mechanism to enforce stringent access controls. By defining roles that align with regulatory requirements,HealthcareMoreover, in industries where compliance is critical, such as finance or healthcare, Custom Roles provide a mechanism to enforce stringent access controls. By defining roles that align with regulatory requirements,