Joiner-mover-leaver

Organisations are usually good at giving people access on their first day and removing it on their last. The problem is everything in between.

When somebody changes role, the new access gets added because they need it to work. The old access rarely gets taken away, because nobody is sure what still depends on it and removing things has no deadline. After a few moves, a long-serving employee can quietly hold access to half the company. It is not the joiner or the leaver that builds that up. It is the mover, and it is the one nobody has a process for.