For the whole company
Least privilege for your card programme too
On Teams, lock the company template so nobody ships an off-brand profile. Set per-person access rules, give department managers only the people they manage, and route profile changes through approvals. The card pool lets you assign, reassign, block or replace cards centrally, and the audit log records security-relevant actions. Offboarding returns a leaver's card to the pool and keeps their contacts with the company.







