This diagram illustrates how Microsoft Entra ID can automatically create conditional, need-based user identities and roles for cloud-based software as a service (SaaS), on-premises, and virtual machine apps. User identities and access can also be automatically maintained or removed as status or roles change.