Enterprise access was designed around a relatively static bargain. Establish an identity, decide what that identity may access, grant the permissions, and assume they remain appropriate until something triggers a review. Authentication has improved, and permissions have become more granular, but the underlying model st...