Case studies
Case Studies
A Fortune 100 telecommunications provider maps hidden access across 250,000+ cloud accounts
About the organization
The company delivers 5G wireless, broadband, and enterprise connectivity across the United States. Tens of thousands of employees and contractors support its network, customer service, and retail operations. Its workloads span regulated environments governed by FCC, CPNI, SOX, and PCI DSS requirements.
The challenge
At this scale, native directory tools present a flat view of groups that run many layers deep. The true reach of a single group assignment was hard to see, and activity volume made it difficult to separate routine events from ones that mattered.
- Nested group reach. In Entra ID, one top-level group expanded into more than 160 nested subgroups, each granting inherited access to sensitive systems.
- Access that outlived employment. 34,176 disabled users still held group memberships, and 30,104 disabled users kept access paths to enterprise SaaS applications.
- Group and ownership sprawl. The directory held 118,990 empty groups, and 625,275 SharePoint resources had no assigned internal owner, which slowed certifications.
- External sharing. More than 22,000 assets were shared externally, including documents labeled confidential, with 29,500+ guest accounts active.
- Signal volume. 511 million monthly activity events and 80 million failed logins made it hard to isolate the events that needed attention.
.png)
.png)
.png)
.png)
%20(1).avif)
%20(1).avif)
No results
