Once the CASB tells IAM about new devices connecting with corporate assets, IAM can check user access levels against permissions in place.