The best features are Access Review and Entitlement Management, where recertification can be run on-demand or on a time-based schedule so that all privileged users get certified by their managers regarding whether they still need access, making it a very good feature for user-centric purposes.





