Which identity controls should be reviewed after a major SaaS update?

After a major SaaS update, teams should review entitlement assignments, license changes, service accounts, API integrations, and audit logging. Those are the controls most likely to drift when the application changes. Review them together so the change does not leave behind access that is no longer justified by the new operating model.