# Lifecycle access acceptance worksheet

Source event reference:
Authoritative source and approval:
Target organization:
Effective time:
Lifecycle operation version:

| Access boundary | Owner | Expected state | Observed state | Verified at |
| --- | --- | --- | --- | --- |
| Directory account | | | | |
| Organization membership | | | | |
| Application roles | | | | |
| Application sessions | | | | |
| Refresh tokens | | | | |
| Access tokens and resource enforcement | | | | |
| API keys | | | | |
| Delegated provider grants | | | | |
| Owned automation | | | | |

Test a sensitive operation before and after the change.
Test duplicate and out-of-order events.
Record reconciliation owner, maximum enforcement delay and final decision.
Use synthetic identifiers in shared copies.