Break-glass access is only safe if its use pages someone.
Silent logging alone is a standing, unmonitored privilege-escalation route disguised as a safety control.
Policy Analyzer
Who can currently do X, accounting for all inheritance?
IAM Recommender
Which grants does this principal hold but never use?
Cloud Audit Logs
Who did what, and when, in the past?
A departed contractor's individual grant sat active for 18 months, found only during a one-off audit. A standing quarterly Recommender review would have caught it within 3 months.