The first day, waiting for accounts
New hires wait for accounts; people who change roles only ever gain access, never lose it.
(Illustrative scenario, not a real incident)
On Peijun's first day at the tutoring school's headquarters,she got a laptop, and a desk.Then she began to wait.
Wait for an inbox, for an invite to the scheduling system,for access to the shared folders.
Headquarters had fifty people.Onboarding was a shared spreadsheet:HR filled in the details, IT created accounts from the sheet.
That month, three new hires arrived at once,and IT happened to be on leave.The new hires waited two days for all their access,and one of them was added to the wrong groupand could see the finance folder.
The same month, A-De from admissions moved to marketing.His new department's tools were set up,but his old customer-management access was never taken back.It was found half a year later, in an access review.
I used to think creating accounts was a small thing;faster was better.Later I learnedthat copying “same as so-and-so”often copies what should never have been given, too.
When people change roles, everyone remembers to “add.”Few remember to “remove.”
New hires who can't get an accountwill borrow someone else's,or sign up for a tool on their own to get by.
Slowness makes people take detours;disorder makes the doors multiply.
- For each role, list the access it should have.
- When someone changes roles, remove the old access first, then grant the new.
- Every grant and every removal leaves a record.