Who can grant access to locksmiths, police, and tracking citations under IDMS?

• A. Only credentialing office staff
• B. Staff outside of credentialing office
• C. The system automatically grants all access
• D. External contractors

Answer: (B)

Access control in IDMS relies on clearly defined roles and separation of duties to keep approvals trustworthy and auditable. The person who grants access to locksmiths, police, and tracking citations should come from a role that is independent from the credentialing function. This independence helps prevent conflicts of interest and ensures that approvals are reviewed with security oversight.

Staff outside the credentialing office are suited for this grant-or-approve function because they can act as an independent approving authority, verifying that the request meets policy and that all necessary checks are in place. They coordinate with credentialing as needed, but they are the ones who authorize the access itself, maintaining proper separation.

Why the other options don’t fit: letting the system automatically grant all access bypasses essential controls and auditing; external contractors generally lack the authority to grant access within the system; and having only credentialing office staff grant access would blur lines of responsibility and weaken separation of duties.