Design IAM controls — authentication, authorization, lifecycle, and privileged access — to enforce least privilege and reduce account takeover risk. Use when implementing SSO/MFA, role design, joiner-mover-leaver processes, or privileged access management.
