Services
Identity and access management consultants for New Zealand organisations
Know who has access. Know it's right. Keep it that way.
We help you manage employee onboarding and offboarding, contractor access, privileged accounts and software licences, so the right people have the right access, without unnecessary security risks or costs.
Book a callCan you say who has access to your systems, and should they?
Access grows one application and one urgent exception at a time, until nobody's sure who can get into what. Then an auditor, an insurer or your board asks.
New starters wait. The paperwork arrives the day before, details go in wrong, and their first week is spent waiting for access to be fixed.
Leavers still have access. Former employees can still reach systems they should never see again.
You're paying for people who aren't there. Dormant accounts and duplicate accounts sit there costing money, and nobody has the time to go looking.
The people who need access can't get it. Contractors, partners, volunteers and field staff either get cut off or get a workaround nobody's tracking.
When access is under control
The right people have access to the right information, at the right time, for the right reasons.
- You can say who has access to what, and why, so the next audit request becomes a simple task, not a scramble.
- Starters get what they need and leavers are properly gone without chasing and unwelcome surprises.
- Your admin and privileged accounts are protected, protecting the accounts that matter most if something goes wrong.
- MFA covers everyone it should, and logging in gets simpler so security stops feeling like an obstacle.
- You stop paying for licences and accounts you don't need helping you spend your budget more effectively.
- Your team can run it themselves so access no longer depends on the one person who knows how it all fits together.
Want to know where you stand?
Identity & Access Management | Client Case Study
They knew access was a problem. They didn't realise how big.
A New Zealand organisation was juggling user access across Active Directory, Microsoft Entra ID and several business systems. New starters couldn't always access what they needed. Former employees still had active accounts. And every audit request meant hours spent tracking down who had access to what. The problem wasn't just frustrating. It was creating unnecessary work and leaving security gaps. We helped them modernise their identity platform, automate access management and introduce stronger authentication. We also made it easier to see who had access to which systems, so their team could manage permissions and respond to audits with confidence.
The difference? Less time spent manually managing accounts and permissions. Stronger controls over who could access business systems. Better visibility and less scrambling when auditors came knocking. A modern, cloud-first identity foundation they could build on. They went from knowing there was a problem to knowing who had access, why they had it and how to keep it under control. "For the first time, we had confidence that the right people had the right access, and that we could prove it."
What our identity and access management service includes
1. Discovery and assessment
We start by looking at how access really works in your organisation today, not just how it's written down. That includes:
- Conversations with the people involved.
- A review of your cloud, hybrid and on-premises identity platforms.
- MFA and Conditional Access.
- Privileged and admin accounts.
- Starter, mover and leaver processes.
- Guest and external users.
- Dormant accounts and licensing.
- Applications and single sign-on readiness.
2. Findings and recommendations
You get a clear picture of where you are, with the risks ranked so you know what needs attention now and what can wait.
- A risk and issue register.
- Prioritised recommendations, including quick wins.
- An executive presentation you can take straight to your leadership team.
- A practical improvement roadmap.
3. Target-state design
A design that fits the way your organisation really works, not a generic template.
- Governance and ownership, so it's clear who decides what.
- Role-based access.
- MFA and Conditional Access design.
- Privileged access and single sign-on approaches.
- Starter, mover and leaver design.
- A roadmap for cloud and hybrid identity.
4. Optional implementation
If you'd like us to make the changes, we can. If you'd rather your team does it, we'll hand over what they need.
- MFA and Conditional Access changes.
- Single sign-on onboarding.
- Role and group redesign.
- Lifecycle automation.
- Privileged access controls.
- Testing and validation.
5. Handover and ongoing review
The point is for you to be able to run this without us.
- Documentation and knowledge transfer.
- An access review schedule.
- Health checks.
- Quarterly or annual reviews if you want them.
Assessment and implementation are separate pieces of work. You can have one without the other, and the proposal will be clear about which you're getting.
Why organisations choose It's Us for identity and access management
Advice that fits you, not a template. Not every member of your staff sits in an office with a laptop, and blanket rules rarely work in practice. We design controls around how your people actually work.
Governance and tech together. We look at who makes access decisions, how those decisions are carried out and how they stay that way. Our advice is based on your needs and your risk, and we'll only recommend replacing your identity platform if it's genuinely justified.
Straight talk. You'll hear what needs attention, what can wait, and which proposed solutions would add more complexity than value.
Outcomes, not just a report. A report that sits on a shelf doesn't help anyone. Every recommendation is tied to a practical business, security or operational result.
You're left in control. We’ll make sure your team can run the environment itself, not one that depends on us.
People you'll actually meet. You'll deal with the same people from the first call to the handover, and they've delivered identity work across cloud, hybrid and on-premises environments in government, insurance, energy and finance.
Is identity and access management the right fit for you?
It's probably a good fit if you:
- Can't confidently say who has access to what.
- Have had audit findings about access, MFA or privileged accounts.
- Are moving from on-premises identity to Microsoft Entra or Microsoft 365.
- Still handle starters and leavers manually.
- Know there are former employees or dormant accounts lurking in your systems.
- Have admin accounts with more access than they need.
- Are preparing for an audit, an inspection or a cyber insurance review.
- Want independent advice before you buy more tech.
It's probably not the right fit if you:
- Only need a single user account created, or have a routine service-desk request.
- Want a particular product installed with no assessment.
- Need penetration testing or active incident response.
- Have nobody who can make access decisions.
- Want an assessment but have no intention or capacity to act on what it finds.
If that's you, we'll say so, and point you to someone who can help.
Three steps to getting access under control
Book a call.
Tell us what's going on. We'll tell you honestly whether we can help, and if we can, you'll get a clear proposal and price before anything starts.
We show you where you stand.
We look at what's really happening, then give you a clear picture and a plan. You decide what happens next.
Know who has access, and that it's right.
So you can protect sensitive information, face audits with confidence and keep access under control.
Identity and access management questions we get asked
What is identity and access management?
Identity and access management, often shortened to IAM or IdAM, is how an organisation makes sure the right people have access to the right information, at the right time, for the right reasons. That covers how accounts are created, what people can reach, how access is removed when they leave, and how you prove it all to an auditor.
Will stronger security make logging in harder?
Not if it's designed properly. Single sign-on, modern authentication and sensible Conditional Access can make security stronger while cutting down on unnecessary login prompts. We plan for the user experience from the start, so security doesn't become the thing everyone complains about.
Do we need to replace our current identity platform?
Not necessarily. The assessment identifies what’s working, what presents risk and what should change. Replacement is only recommended where justified.
What if our older applications can't support modern authentication?
It's a common worry, and there's often a way through. Older applications may need upgrades, integration work or extra controls to protect them, and we'll tell you what's realistic before you commit to anything.
Is this just a Microsoft Entra or Active Directory review?
No. Entra and Active Directory are often at the centre of it, but we also look at governance, processes, applications, on-premises directories, cloud services, external users and the licensing connected to identity. And if you're not a Microsoft organisation, that's fine too.