THE STARTING POINT
Three things to get right.
- Review privileged roles and stale access with the responsible owner.
- Test policy changes with a limited pilot and documented recovery path.
- Keep human, service, and workload identities distinct in your review.
TRY THIS WITH YOUR CUSTOMER
A question worth testing.
Customer objective: show how an access policy evaluates before it is enforced. Use a dedicated test tenant, a small test group, and report-only policy results; compare recorded sign-ins with the agreed expectations.
Open the workshop guideGive the customer a useful takeaway.
Start with a customer question and a clear success criterion. Capture the baseline, observed behavior, and evidence, then explain what the result means and which question to investigate next.