Behavior-based machine learning for identity and access often results in radical reductions for accounts and access entitlements. Identity is a threat plane requiring identity and access data science that predicts and prevents security risks, assists with high privilege access monitoring, excess access, compliance, and intelligent provisioning.