Identity and Access Management (IAM) is a framework used to manage access to physical and electronic assets. In information security, IAM describes management of user access and defining the actions a user can perform within the organization. Most organizations utilize Windows Active Directory to manage their general user environment.