Which process is responsible for providing the rights to use an IT service?

Incident management focuses on restoring normal service operation as quickly as possible after a disruption, not on granting usage rights.

Access management controls who is allowed to use IT services by managing access rights and ensuring only authorized individuals can utilize them. It implements the policies defined in information security management, acting as the execution arm for granting, modifying, or revoking service access. This process directly addresses the concept of 'rights to use' a service.

Change management controls the lifecycle of all changes to minimize risk and disruption, not the granting of user access rights.

Request fulfillment handles service requests such as password resets or information requests, but access rights provisioning is specifically owned by access management.