This is the curse of large-scale role explosion in micro-segmentation. What starts as a clean access map mutates into thousands of redundant, overlapping, and stale roles—many with unclear ownership or purpose. The result is a brittle access control system that no one can fully trust, difficult to audit, and dangerous to change.
Micro-segmentation is meant to tighten security boundaries. But at large scale, without guardrails, it produces role sprawl faster than operations can contain it. Dynamic applications, ephemeral infrastructure, and constant change amplify the problem. Teams create new roles for each case, each exception, each project. Old roles remain. Documentation lags. Soon, identical privileges hide behind dozens of slightly different IDs.
The security risks are obvious. Least privilege collapses into vague privilege. Attack surfaces multiply. The time to investigate access incidents grows from hours to days. Compliance checks become guesswork. Engineers spend more time cleaning access maps than deploying features.