Which activity is not typically considered part of identity lifecycle management?

• A. Physical security badge issuance.
• B. Provisioning new user accounts.
• C. Deprovisioning accounts when access is no longer required.
• D. Updating access permissions as roles change.

Answer: (A)

Identity lifecycle management centers on the creation, modification, and removal of digital identities and their access across systems. Provisioning new user accounts creates the digital identity and gives initial access, updating permissions as roles change keeps access aligned with responsibilities, and deprovisioning removes access when it’s no longer needed. Physical security badge issuance, while related to overall security, is a physical-access control activity handled by facilities or security teams and not part of managing digital identities and their access. So the activity not typically considered part of identity lifecycle management is issuing physical security badges.