PIV Roles

In the context of Personal Identity Verification (PIV), various roles are involved in managing, issuing, and using PIV credentials. These roles are defined by standards such as NIST SP 800-79 and FIPS 201. Here are the key PIV roles:

PIV Role Description
System Administrator
  • Manages PIV credential usage within systems and applications.
  • Ensures proper integration of PIV authentication mechanisms in IT infrastructure.
  • Ensures compliance with federal policies and standards.
Applicant An individual who applies for a PIV credential. Typically, a federal employee or contractor who needs access to federal systems or facilities.
Sponsor
  • Ensures the applicant meets eligibility requirements.
  • Responsible for approving and authorizing a PIV credential request.
  • Onboards a user.
Registrar
  • Enrols user biographic and biometric data.
  • Conducts identity proofing following NIST SP 800-63 guidelines.
  • Ensures required documentation and user data are collected and verified before approval.
Adjudicator/Approver
  • Reviews background investigation results.
  • Determines whether an applicant meets the necessary trust requirements for receiving a
    PIV credential.
Security Officer
  • Oversees the overall security policies and procedures related to PIV credential issuance
    and usage.
  • Manages lifecycle of issued identities.
Issuer
  • Issues the PIV credential after successful identity proofing and background checks.
  • Ensures credential personalization and secure activation.
Helpdesk Operator Helps with the lifecycle management of the issued identities