Divisions within larger user identity categories are called?

Divisions within larger user identity categories are called?

• A. Administration
• B. Identity Life Cycle
• C. Vendors
• D. Subgroups

Answer: (D)

Subgroups are divisions within larger identity categories. In identity and access management, groups organize users, and subgroups are nested groups that create a hierarchy inside a parent group. This structure makes it easier to manage permissions at scale: permissions granted to the parent group can flow to its subgroups, while still allowing specific adjustments as needed. For example, you might have a top-level group called Employees, with subgroups like Engineering and Sales, and further subdivisions like Engineering -> Frontend and Engineering -> Backend. This enables both broad and granular access control without duplicating permissions. The other terms don’t fit because administration refers to managing users and their access rather than dividing identity categories; Identity Life Cycle covers provisioning and deprovisioning across a user’s lifetime; and Vendors are external providers—not the divisions within identity categories.

Subgroups are divisions within larger identity categories. In identity and access management, groups organize users, and subgroups are nested groups that create a hierarchy inside a parent group. This structure makes it easier to manage permissions at scale: permissions granted to the parent group can flow to its subgroups, while still allowing specific adjustments as needed.

For example, you might have a top-level group called Employees, with subgroups like Engineering and Sales, and further subdivisions like Engineering -> Frontend and Engineering -> Backend. This enables both broad and granular access control without duplicating permissions.

The other terms don’t fit because administration refers to managing users and their access rather than dividing identity categories; Identity Life Cycle covers provisioning and deprovisioning across a user’s lifetime; and Vendors are external providers—not the divisions within identity categories.