What happens during an aggregation in the context of policies?

During an aggregation in the context of policies, policies are evaluated for violations based on current data. Aggregation is the process in which data from various data sources is collected into the IdentityIQ platform. This data is then analyzed against established policy rules to identify any compliance issues or violations.

When a system performs an aggregation, it pulls in up-to-date information about user access and entitlements, allowing it to assess whether any users are in breach of defined access policies. This ensures that organizations can maintain compliance with regulatory requirements and internal governance by continuously monitoring access rights and identifying discrepancies that need to be addressed.

The other options provided do not accurately represent what occurs during an aggregation. For instance, creating and approving policies is a separate process that does not occur as part of data aggregation. Additionally, sending data solely to external auditors or archiving user data does not reflect the primary activity of analyzing current data for policy violations.