Identity and Access Review

Details and scope

Review who can access the cloud estate and prepare a least-privilege access design. Access matrix, privileged-role review, lifecycle recommendations and 2 workshops. Each sampled role is traced to an owner, permission set and remediation decision. The stated scope is agreed before work starts; additional work is quoted separately.

Specifications

• 1 identity tenant; up to 100 users, 20 roles and 10 service identities
• 50 specialist-hours including preparation, delivery, checks and handover
• Access matrix, privileged-role review, lifecycle recommendations and 2 workshops
• Acceptance: Each sampled role is traced to an owner, permission set and remediation decision
• Excludes: Directory migration, user support desk and compliance certification