Follow the path from any person to everything they can reach.
You follow the path, hop by hop, and see the grant that put them there.
Posture, identity graph

Nobody can answer how a contractor ended up able to reach the finance app.
How it works
Membership, ownership, role assignment and OAuth grants are all walkable edges, traversed to depth three
Traversal to depth three and up to a thousand nodes, rendered as a real graph, never flattened into a tree
Path analysis returns every route from source to target, up to five hops, with the grant behind each edge
The jobs it is bought for.
Close the door firstFix the four exposures worth fixing, not the fourteen hundred
Nobody owns this accountEvery service account, key and token gets a name against it