Consumers are under no circumstances implicitly trusted. Anytime a consumer attempts to access a resource, they must be authenticated and approved, irrespective of whether they're by now on the business network. Authenticated users are granted least-privilege accessibility only, and their permissions are revoked the moment their undertaking is done. https://ieeexplore.ieee.org/document/9941250