Identity and access management is the principle of limiting systems access to only authorized users and applications, including restricting access to only the necessary network resources. In cloud environments, identity and access management controls typically consist of the policies and services that you use to identify, authenticate, and authorize users, groups of users, and applications.