Identity Lifecycle Review Lab

Goal

Find stale access and inherited permissions in a safe lab account or directory export.

Estimated cost: Free when performed with local diagrams, exports, or test data. If you use a real cloud, lab, or SaaS environment, verify cost and authorization first.

Concepts Reinforced

identity lifecycle
de-provisioning
inherited rights

Prerequisites

A non-production lab, diagram, or exported sample data.
Authorization to review the data or configuration.
A text editor or spreadsheet for notes.

Exact Steps

Export a test user/group membership list.
Mark active, transferred, and terminated identities.
Trace inherited access from nested groups.
Document removals and the evidence needed to prove completion.

Verification

A second reviewer can explain why each access path remains or was removed.

Cleanup

Delete any temporary export and remove test accounts created for the lab.