1 min lesson
Identity, access & admin controls
Show why this lesson detail matters: "At a few seats, identity is a login."
Step 1 of 4
At a few seats, identity is a login. At a few thousand seats, identity is a lifecycle and the lifecycle is what a security reviewer audits.
Your job as SA is to wire Cursor into the identity machinery the customer already runs, so that provisioning and offboarding happen without a human touching a console. Three primitives carry the weight.
Learn more
Full explanation
The Enterprise Control Surface
Interactive diagram. Tab through its regions; each focused region shows its detail in the panel below.
Identity decides who's in; policy decides what they can do; audit proves the controls operate.
“An offboarded engineer keeping access for three weeks is a directory problem, and SCIMSystem for Cross-domain Identity Management. A standard for automatically creating and removing user accounts when people join or leave. Press Enter for the full definition. is how we close it. Deprovisioning is event-driven off your IdP: disable the account in the directory and Cursor access is revoked with it. There is no manual step left to forget, which is why this one control closes a recurring audit finding.”
Learn more
Optional practice
Practice: Identity, access & admin controls
QA security team's top concern is orphaned access: people who left the company still showing as active. Which control do you lead with and why?