Access Management Policy

Least-privilege access, role-based authorization, access reviews, and 24-hour offboarding.