[E 9] Entitlement Management: Access as a Governed Object
Most access is granted by hand and never taken back. Entitlement management turns access into a governed object with a requester, an approver, a reason, and an expiry.
Series Entra ID
[E 10] Access Reviews and Lifecycle Workflows
Access is not an event, it is a lifespan. Access reviews and lifecycle workflows make provisioning, recertification, and deprovisioning something the platform runs rather than something people remember to do.
[E 11] External Identities: B2B, Cross-Tenant Access, and Direct Connect
Bringing an outsider into your directory is a trust decision wearing the clothes of a convenience feature. External identity is deciding how much of someone else's security posture you will inherit as your own.
[E 12] Watching Identity: Sign-in Logs, Audit, and Health
Every control produces a record, and a control whose record no one keeps is one you are only assuming works. Watching identity turns the directory's exhaust into something you can alert on and answer questions with later.
[GSA 1] Global Secure Access: Identity at the Network Edge
For years the network and the identity were governed separately, and the seam between them was where attackers lived. Global Secure Access closes that seam by making the network path itself something the identity system authorizes.
