The State of Identity & Access Report 2026

The average identity holds 100,000 permissions across global enterprises.

38% of all accounts in global enterprises are dormant.

Inactive users hold 16.5% of total permissions in global enterprises.

Machine identities outnumber human users by a ratio of 17:1 in global enterprises.

Just 0.01% of non-human identities control 80% of all cloud permissions in global enterprises.

13% of users in global enterprises lack multi-factor authentication.

27.8% of permissions remain ungoverned in global enterprises.

824,000 orphaned accounts, representing 8% of all accounts, have no human owner in HR systems in global enterprises.