We have many applications for which the access is controlled by ActiveDirectory and/or Entra groups. Our rectification is process is by app "owner" except for when it's the owner's access, in which case the line manager is responsible.

I can't really see how to set this up and understand what the licensing implications are.

What are your thoughts please?