Identity becomes a technical architecture problem at the enterprise scale. Understand when the graph outshines RBAC, how to limit revocation delay, and when all of the above is unnecessary overhead.