- Enforce policy over all changes.
- Find and eliminate inappropriate entitlements.
- Audit requests consume significant administration time.
- Audit failures.
- SoD engine: prevent new and detect existing violations.
- Authorization workflow: N of M approvers, reminders,
- Access certification, both scheduled and on-demand.
- Detect and respond to unauthorized changes on integrated apps.
- Report on current and historical entitlements.