All insights
POWER PLATFORM AT SCALE

Sight — Identity, Access, and Ongoing Recertification

Access accumulates. The offboarding gap is the most predictable and most preventable identity governance failure in any Power Platform estate. Here is how to close it.

“Access accumulates. The offboarding gap is the most predictable and most preventable access governance failure in any Power Platform estate.”

People join organisations and receive permissions. Projects end and the access granted for them is not always removed. Makers build solutions under personal accounts and those accounts become the credentials those solutions depend on. Sight is the discipline of watching that accumulation — and addressing it before it creates exposure.


What Sight Governs

Sight covers four areas. Maker access — governed through security groups rather than individual assignments. Service account lifecycle — creation, scope, rotation, and monitoring for unattended flows. Privileged role governance — just-in-time admin access through Microsoft Entra ID Privileged Identity Management so administrative permissions are not permanently assigned. Ongoing recertification — periodic review of all access grants to confirm they remain appropriate.


What Power Platform Provides

Microsoft Entra ID Privileged Identity Management for just-in-time admin access. Security group-based environment access for scalable maker permission management. Power Platform Admin Center role assignment and review. Automated offboarding integration through Entra ID lifecycle management.


The Enterprise Gap

The offboarding gap — where departing individuals’ credentials continue to power live automations — is the most common and most preventable access gap. It cannot be addressed by a one-time audit. It requires a continuous review cycle with explicit Power Platform steps in every offboarding process.


One Action

Add Power Platform to the offboarding checklist today. For every individual who leaves or changes role, identify every flow and solution running under their credentials. Migrate critical ones to service principals. The process takes minutes per person when it is part of the standard offboarding flow.


Part 27 of 36 | #PowerPlatformAtScale

The full Sight model, including the access governance framework and recertification cycle design, are in the book.