Business · official-source review · reviewed 2026-10-04
A role change can leave old permissions active. Review each system with its owner.
List systems, confirm required access, and record removal or approval through the organization's process.
Managers, system owners, and operations staff who process a worker's role change.
Use the source document or official route that applies to your situation. This guide does not contact another person or verify external information.
Use the approved people or contract record.
Ask system owners for the worker's current roles and permissions.
Keep only the access the person needs for the new tasks.
Use the approved identity and access process for each system.
Record the owner, request date, status, and evidence location.
A staff member moves to a new team. The manager asks each system owner to review the old and new role before access changes are complete.
Use your own source and details. The example is not a record about a real person or organization.
U.S. Cybersecurity and Infrastructure Security Agency · reviewed 2026-10-04
What this source supports: Give each person only the access needed for the current task. Review access after a role change and remove access that is no longer needed.
Source limit: This is security guidance, not a personnel policy or legal deadline. Follow the organization's approved process and preserve required records.
These sources support the statements above. They do not show that every person needs this guide. They do not show a specific result.
This is a coordination checklist, not a legal timeline. Follow organizational policy and preserve records that the organization must keep.
This is security guidance, not a personnel policy or legal deadline. Follow the organization's approved process and preserve required records.
Use current instructions from the responsible organization. This guide is a planning aid, not an official decision or a substitute for qualified advice.
Each App has a separate job. Choose the one that fits your next step.
APP 1
Record each system and whether the access is needed for the person's new tasks.
Free · no account · no upload
Open Review Access for a New RoleAPP 2
Track the request, responsible system owner, and confirmation status.
Free · no account · no upload
Open Confirm an Access-Removal RequestThe Apps run in this browser. They do not send or save entries. Copy, download, or print only when you choose.
This guide uses short, direct instructions as an ASD-STE100-style writing target. It is not a formal certification.