Which process is responsible for providing the rights to use an IT service?

Incident management focuses on restoring normal service operation as quickly as possible after an unplanned interruption, not on granting or managing user access rights.

Access management is specifically defined in ITIL as the process responsible for granting authorized users the right to use a service while preventing access to non-authorized users. It executes policies defined in information security management and controls who can access what service and under what conditions. This makes it the direct owner of granting rights to use IT services.

Change management governs the lifecycle of all changes to IT infrastructure and services to minimize disruption, not the assignment of user rights to services.

Request fulfillment handles the processing of service requests, which may trigger an access management action, but the process responsible for actually granting and managing rights is access management itself.