People who left, access that stayed.
Your Identity Governance and Administration platform (SailPoint or Saviynt) says someone has gone. Microsoft Entra ID tells you a privileged account or an app still lets them in. Assay compares the systems and shows each gap with the person, the access and who should act.