“Access accumulates. The offboarding gap is the most predictable and most preventable access governance failure in any Power Platform estate.”
People join organisations and receive permissions. Projects end and the access granted for them is not always removed. Makers build solutions under personal accounts and those accounts become the credentials those solutions depend on. Sight is the discipline of watching that accumulation — and addressing it before it creates exposure.
What Sight Governs
Sight covers four areas. Maker access — governed through security groups rather than individual assignments. Service account lifecycle — creation, scope, rotation, and monitoring for unattended flows. Privileged role governance — just-in-time admin access through Microsoft Entra ID Privileged Identity Management so administrative permissions are not permanently assigned. Ongoing recertification — periodic review of all access grants to confirm they remain appropriate.
What Power Platform Provides
Microsoft Entra ID Privileged Identity Management for just-in-time admin access. Security group-based environment access for scalable maker permission management. Power Platform Admin Center role assignment and review. Automated offboarding integration through Entra ID lifecycle management.
The Enterprise Gap
The offboarding gap — where departing individuals’ credentials continue to power live automations — is the most common and most preventable access gap. It cannot be addressed by a one-time audit. It requires a continuous review cycle with explicit Power Platform steps in every offboarding process.
One Action
Add Power Platform to the offboarding checklist today. For every individual who leaves or changes role, identify every flow and solution running under their credentials. Migrate critical ones to service principals. The process takes minutes per person when it is part of the standard offboarding flow.
Part 27 of 36 | #PowerPlatformAtScale
The full Sight model, including the access governance framework and recertification cycle design, are in the book.