Joy_Chik the old/new world identity model is a great way to frame changes to 'who is in my transaction universe' but what about changes to 'who is in my knowledge universe'. Take a former employee. It's clear that their right to take action in my M365 transaction universe -- send/receive msg, create/edit/open file, create/view video, etc. -- is taken away and that they cease to be an actor. But what about in my M365 knowledge universe. Aren't they still a presence to others still active. Just as you are recognizing a roles beyond 'employee' (customer, partner, bot) in the transaction layer, shouldn't their also be roles beyond employee, including 'former employee', in the knowledge layer. As M365 clearly wants to take an ever larger role as an enterprise knowledge network -- Graph, Intelligent Search, Cortex -- shouldn't their be explicit roles for personae in the knowledge network even if those personae do not have permission to act?