Oversees issuance, renewal, and revocation of any access credential—physical cards or mobile—across all users.