SaaS: Microsoft runs the app, you run access + governance
Even in SaaS, you still control access decisions, accounts, endpoints, and data governance. Microsoft: application operations. You: who has access and what permissions they get. You: account management (joiner/mover/leaver). You: data governance and endpoint security.