Joiner, mover, leaver: the identity lifecycle explained
Access should follow people through their time with you. The joiner-mover-leaver model is how to think about it.
Security teams talk about the joiner, mover and leaver (JML) lifecycle because most identity problems happen at its transitions.
Joiners
New starters need the right access quickly. Slow provisioning wastes productive time; over-provisioning creates risk.
Movers
When someone changes role or department, new access is added, but old access often stays. Over time, people accumulate permissions they no longer need.
Leavers
Accounts of departed staff should be deactivated promptly and consistently. Relying on someone remembering is not a control.
Automating the link
The HR record already knows about joiners, movers and leavers. Connecting those events to Active Directory through defined workflows, rules and approvals makes access accurate and auditable. This is what DAPI does.
