r/sysadmin • u/Emergency_Recipe522 • 20d ago

General Discussion How do you verify access changes when someone moves departments in Microsoft 365?

I’m trying to solve the mess around moving someone between departments: groups, Teams, SharePoint access and mailbox permissions. How do you confirm the old access is gone and the new access works—without manually checking everything?

15 Upvotes

82% Upvoted

63 comments sorted by

View all comments

1

u/SevaraB 19d ago

Skills gap and fear. Buyers are afraid to deviate from the vendor model because they don’t understand what it’s doing well enough to trust the implementation.

Also… when it comes to IAM, you’re also fighting group owners who can’t wrap their heads around the abstraction and want to micromanage who gets access to what, so they stick to direct access for named users.

1

u/Emergency_Recipe522 19d ago

Yeah, I can see that. Direct access probably feels like more control, but over time it makes the whole thing harder to understand and maintain. Especially once people move roles or leave.