Blog
How access is managed as code, on access requests, approvals, drift, reviews and end dates.
- Drift: access granted by hand in Entra
Access added by hand in Entra is either reported, so a person decides, or put back to what Git says. And access that should end, ends.
- Start read-only: observe first, then enforce
Adopt Entitlements as Code on a live directory without changing it. Import what exists, observe with nothing written, then enforce one organization at a time.
- Who approves an access request?
The owner of a group approves who joins it, a change of owners needs two people, and the person asking never approves their own access.