Set up a Firezone trial with two resources and two user groups. Verify that each group can reach only its assigned resource, then revoke a user and confirm access stops. Test a device on a different network, an expired session, and recovery after the client reconnects.
Document identity-provider dependency, administrative access, and a fallback path if the control service fails. Private access software is valuable when policy is easy to explain and operators can respond quickly to lost devices or misconfigured rules.
Akousa