Responsibility shifts with the service model
More managed service equals more Microsoft responsibility, but never zero customer responsibility. IaaS: you manage more (VM guest OS, patching, apps). PaaS: Microsoft manages more platform; you manage config, identity, and data. SaaS: Microsoft runs the app; you manage access and data governance. Always yours: data, endpoints, accounts, access.