ITIL v3 defines access management as the process of granting authorized users the right to use a service, while preventing access to non-authorized users. Access management enables users to use services documented in the service catalog. It manages identity, access rights, services, and uses directory services to manage access and rights. The goal is to provide users the right level of access to services according to defined policies and security management.