3.2 Identity and Access Management - The ability of the TRE operator to ensure the right people (identities) can only access the tools and data they need. Identity and access management processes manage access to data during the data lifecycle. The permission assignment process is triggered by an information asset owner to change permissions for a researcher on research data. This process is served by the access management application. The authentication process identifies users and issues the correct permissions at logon.