Why access should follow the person, not the paperwork

Leaver checklists get ticked and accounts stay open. The fix is structural, not procedural.

Why leaver processes fail

Most leaver checklists are complete and still ineffective, because they rely on someone being told. If IT learns about a departure from a calendar invite or a conversation, the gap between exit and revocation is measured in days or weeks.

Tie access to the record, not the request

• Provision from the people record, so the trigger is the status change.

• Map roles to permission sets rather than granting access individually.

• Review quarterly using a list the system produces, not one you compile.

• Keep a dated history of what was granted, by whom and why.

The audit benefit

When access is derived from a record, an access review becomes a report rather than a project. You can answer who had access to what, on which date, without reconstructing it from tickets.

it+ provisions and revokes devices, accounts and permissions from the same record hire+ and operations+ use. Talk to sales about joining them up.