why it is still open, and what to close first
The identity platform will tell you who was onboarded. It will not tell you which verb would succeed this morning, on which resource, by whose hand.
Who can do what? The identity platform will tell you who was onboarded. It will not tell you which verb would succeed this morning, on which resource, by whose hand. The review can close. The access can stay.
This book is for the identity lead who already has CyberArk, SailPoint, or Entra. It does not ask for a new platform. It asks for one sentence the consoles will not write for you: who can do what, why it is still open, and what to close first.
The album follows the book. Ten tracks, one for each chapter, in the same order, and the words are that chapter's argument, not a separate set of lyrics written around it. UK rap and grime over drill and R&B production, with a complex solo piano running through every track.
Every track sits beside its chapter below, so you can read a summary, hear the argument, and come back to it on the commute.
One chapter and its track a day, from Friday 2 to Sunday 11 October 2026. 2 out so far. Each one goes live at 08:25 UK time.
Every released chapter has its own page with the full text, a narrated audiobook, and its track. Open one below.
The question the consoles don't answer. CyberArk, SailPoint and Entra are already running, and each one answers something smaller: a sign-in it can see, a record that was approved, a secret that was chosen for storage. Three of those answers on a page are a catalogue.
Addition is not discovery.
The thing you can point at: the object that makes a verb succeed. Strip away the campaigns and certification records, and what still works the next morning is the object. The catalogue often calls it something else.
The catalogue names the access. The object grants it.
Who is an owner you could call. Can means an action that would succeed this morning. What is a resource and an action on that resource.
At nine o’clock, with no new approval, no new activation, and no incident declared, does this verb succeed?
The verb that would succeed this morning is this, because of these objects, and the stack that is telling the truth about the grant is this one.
Standing, requested, or break-glass. Eligible-but-not-active is recorded beside them, not as a fourth way can is true.
There is not one anywhere in this book. A five-by-five grid will be filled in from instinct.
One verb, every object that grants it, and a date written down to check it again.
“Automate the extract. Leave the sentence to a person.”
Pick one neighbourhood: the oldest applications, the last acquisition, or the platform that ships faster than you onboard. Write what you find, then open the three consoles. Leave a cell blank if you don't know. There's no risk-score column, on purpose.
| Identity as found | Owner | Verb and resource | Identity provider | Governance | Vault | Evidence | Remove |
|---|
The table is saved only in this browser. Nothing you type is sent to this site.
Monday, before a console.
Pick one neighbourhood. The oldest set of applications, the last acquisition, or the platform that ships faster than you onboard. Not the company.
Write three cells, and leave a cell blank if you cannot fill it. Who you could call. Whether the action would succeed this morning. The resource and the verb. A blank is a finding, not a hole in your notes.
Look where the work runs. Manifests, pipelines, the people who keep the system up. Copy the name you found. Write verbs, not the group label the verb was buried in.
Only then open the three consoles. Entra, or whatever directory you have. The governance platform. The vault. Mark yes, no, or unknown. Do not start from an export. Do not put a campaign's completion percentage on the page. Do not add a risk score.
The table is in Chapter 1, set out column by column, and a blank copy of those columns is in the appendix. Rows are identities. You want two counts, each with a denominator: rows where a verb would succeed and at least one console says no, and rows every console shows whose verb still has no justification.
That number is not a remediation plan. It is the sentence you can say out loud. The book after this page is what you do with it.
The book is in final review. Leave your email and you'll hear once, on the day it's published. No newsletter, no sequence.
Written by Nicholas Martin. Music made with Suno. © 2026 Nicholas Martin.
May we use Google Analytics cookies to see which pages people read? They're only set if you accept. Privacy policy