Usability in IAM: built for users, approvers, owners and admins
Usability barely features in tenders, questionnaires or compliance frameworks. In day-to-day operation, it helps decide whether requests, approvals and recertifications are handled with care.
Why usability decides IAM success
IAM controls only work when people understand them
An IAM tool is a collection of controls operated by people: requests, approvals, recertifications, troubleshooting. How effective these controls are depends on whether the people involved understand what they are working on.
If managers cannot see what they are approving, they approve anyway, and when in doubt they approve everything. If business owners cannot read the recertification, they click “confirm all”. Sooner or later, blanket confirmations like these become an audit finding.
And if users cannot find the request path, a shadow process emerges: the email to IT, the spreadsheet, the quick word in the corridor. Access granted this way bypasses the IAM tool, with no request and no audit log entry.
Tenders rarely weigh usability; they mainly score feature lists. We weigh this differently.
Four users · one tool
How Nova is built for four roles
Each of the four roles has a moment that shows whether an IAM tool works. The views below are screenshots from Nova: approval and recertification from the demo tenant of a fictitious insurer (October 2026), the two chat views from an earlier demo system with the previous UI (July 2026).
“I need access like my colleague.”
The request starts in the user’s own words, not in a role-catalog puzzle: the assistant finds the matching roles and shows business description and risk class before the request goes out. Those who prefer searching to asking get a searchable catalog with approval stages per role.
“What exactly am I approving here?”
The answer is in the request itself: SoD conflicts are checked before approval and shown with severity, reasoning and a question channel on one screen. During absences, deputy approvals take over, fully audited.
“Why does someone outside my area hold my role?”
Recertification with risk flags per row: unused access, critical roles, anomalies. Entries can be grouped by person or role; every decision stays individual and is recorded in the audit log. This makes the individual decision easier than the blanket confirmation.
“Are my users in sync?”
Three-way reconciliation shows target, actual and drift per system. The admin chat answers analysis questions in plain language and works with more than 50 tools directly on the system: users, roles, jobs, health checks, audit.
The field test
A 90-day pilot with your own team
The pilot shows how usable Nova is: 90 days alongside your existing tool, with your own approvers, owners and admins. Afterwards, your team decides whether Nova works in day-to-day use.