I was at (even a small) Azure shop for a while, and I'm not sure anyone could easily tell who could get at what, and why, as contractors came and went. The abil

I was at (even a small) Azure shop for a while, and I'm not sure anyone could easily tell who could get at what, and why, as contractors came and went. The ability to see clearly into authorization across systems would be instrumental to making sense of years of inconsistently applied (or iterative at best) access controls.