Active Roles ROI Calculator
Discovery:
Company Information
Company Name:
Number of Employees:
How many Tier 0 users and groups do you have?
How many AD Domains and Entra ID Tenants do you have?
How many inactive AD user accounts do you have?
How many inactive AD service accounts do you have?
Are there groups that could be made dynamic in your domains?
How many domain admins are there within your organization?
Employee and Support Information
Work Hours per Day:
Work Days per Year:
Work Hours per Year:
IT Admin Salary Annual:
ROI Over Time:
Analysis Time Frame (Years):
Benefits:
Employee and Support Information:
Provisioning Users:
Annual Employee Growth Rate:
Annual Employee Attrition Rate:
Provisioning Users:
Current amount of time it takes to provision a user:
Estimated amount of time it takes to provision a user using Active Roles:
Deprovisioning Users:
Current amount of time it takes to deprovision a user:
Estimated amount of time it takes to deprovision a user using Active Roles:
CalculateResult
Having many Tier 0 users and groups can cause your over-Privileged accounts to be exposed. They should be kept at minimum.
Active Roles will manage all AD Domains and Entra ID Tenants from a consolidated view.
Active Roles will manage the inactive user accounts and accordingly delete with automated policies.
Active Roles will manage the inactive service accounts and accordingly delete with automated policies.
Active Roles rules enable accounts to be added to groups dyanmically, in place of static groups.
Having many domain admins increases your attack surface. Active Roles can optimize the # of domain admins you need and grant access to accounts at a fine-grained level to ensure accurate access.
Empty Groups may have access to elevated permissions by nesting. Therefore, managing them is critical. Active Roles can help identify and manage them.