Access policies are defined centrally and enforced differently everywhere. Whether a remote user in one region gets the same controls as HQ is a matter of hope, not evidence.
"We wrote one access policy — can anyone prove it's actually enforced the same way across forty locations and three clouds?"
Enforcement visibility
Audit evidence effort
To first enforcement report