Who has access to what, as one grid

The answer to who has access to what was spread across one page per application. Each one was correct and none of them was the answer, because the question is about a person across the estate, not an application across its members.

The grid puts it in one place: identities down the side, applications across the top, and the access level in the cell. The header row and the identity column both stay pinned while you scroll, so you never lose which column you are reading or whose row it is. Filters and search narrow it, and the whole thing exports to CSV, which is usually what an auditor actually asks for.

Beside the matrix there is a graph view, for the shape the grid cannot show: who shares access with whom, and which identities cluster around the same applications. Non-human identities sit in the same picture as people, because an orphaned service account with production access is the row a per-application page was least likely to surface.