Within the software as a service (SaaS) model, which responsibility is shared between Microsoft and the customer?

In the SaaS model, Microsoft manages the underlying infrastructure, operating systems, and application code. However, customers are responsible for managing their users and their access to the SaaS application, which falls under identity and directory infrastructure management. This is a shared responsibility because Microsoft provides the identity services (like Azure Active Directory), but the customer configures and manages their specific users, groups, and access policies within that service. Application management and operating system updates are primarily Microsoft's responsibility in a SaaS model. Information and data management is primarily the customer's responsibility, as they own and control their data within the application.