Automating the joiner, mover and leaver lifecycle
Connecting HR events to Active Directory so access follows the employee lifecycle.
This is an illustrative case study written to show our approach and the kind of outcomes such work targets. It does not describe a specific named client engagement.
HR records new starters, role changes and leavers; IT creates and removes accounts through tickets and manual steps.
New starters wait for access, role changes leave old permissions behind, and leavers' accounts may stay active too long. Audit evidence is scattered.
An automation layer that receives HR events, applies provisioning rules and approvals, performs the matching Active Directory actions and records each step.
How it was delivered
Rules are agreed with HR, IT and security before anything is automated.
Map the lifecycle
Document current joiner, mover and leaver steps.
Define rules
Agree provisioning rules and approvals.
Automate
Connect HR events to directory actions.
Audit and refine
Review the audit trail and tune rules.
The solution in pictures
What this kind of work delivers
Faster onboarding
Access is ready sooner.
Right access over time
Role changes are reflected in the directory.
Consistent offboarding
Accounts are deactivated through a defined process.
Building an enterprise PDPA governance programme
A central consent hub across digital and branch channels
