For each entity-managed Transient Cyber Asset or group, authorize the users (individually or by group or role), the locations (individually or by group) and the uses, limited to what business functions need.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.