Is this not basically Azure Management Groups for policy rules, Entra ID for identity management linked to whatever HR system your organisation has? Since we're in the Microsoft world you'd probably sprinkle Cluedin or whatever it's called on top of it for mdm.

I don't necessarily recommend living in the Microsoft cloud, but it's what companies do in Denmark, so it's what I know.