An information processing apparatus includes: a registration unit that, for a role to be assigned to users who utilize a system, pre-registers authority to be granted and identity confirmation to be required in association with the role; a storage unit that, for each of the users, stores information on identity confirmation which has been performed by the users; and an authority control unit that, in response to assignment of a new role to a user, in a case where the storage unit stores information which indicates that the user has performed the identity confirmation associated to the new role, controls to validate authority associated with the new role.