A role change can leave old permissions in place while the employee is waiting for new ones. Managers, the service desk and identity administrators each hold part of the answer.
Use the identity ticket to establish context, collect the right approval and check that the resulting access still fits the employeeโs role.
01
Understand the request
Bring sign-in evidence, account status or missing permissions into the ticket before selecting a recovery or access workflow.
02
Route the decision
Send access plans to managers and application approvers. Use the dual-approval flow where an application requires two decisions.
03
Clean up access
Review inherited rights on role changes, revoke expired access and coordinate urgent departures with the teams involved.
Bring one identity ticket and its approval policy. Trace the request from the employeeโs first message through the final access change.
Talk to an expert
