User posture
Review active, inactive, frozen, administrative and stale-login populations. A missing last-login date participates in recency review without implying a separate exhaustive “never logged in” scanner.
Identity & Access
User and session exposure in one review area.
Inspect identity posture, login recency and selected powerful access without changing user access.
Identity evidence
Sessions and logins
Inspect current-session and failed-login summaries, including supported inactive-user session exposure. Retained and displayed evidence contains no session IDs or raw IPs; source network values are reduced to bounded classifications.
Broad access
Review API Enabled, delegated administration and login-access exposure with source limitations.