Joiners, movers and leavers: granting, removing and reviewing access
The administrator's side of access management across its whole life: approved requests and role-based grants for joiners, re-checking access for movers so privilege doesn't pile up, disabling and revoking everything for leavers while keeping their data, and running periodic access reviews that end in removals you can prove. Framed by NIST SP 800-53 account management and least privilege controls; the time limits come from your own policy.
- Level
- Intermediate
- Length
- About 65 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 3 Oct 2026
Skills you'll practise
- Grant a joiner's access only from an approved request, through role groups, with a record that links the two
- Re-check and adjust a mover's access so old rights are removed, not just new ones added
- Run a leaver checklist that disables accounts, revokes credentials and tokens, changes shared secrets and preserves the person's data
- Find leaver, mover, orphaned and excessive access in a review extract and record the decision for each
- Explain separation of duties and least privilege, and spot requests that break them
Course outline
- 1.Joiners, movers and leaversVideo · 2 min
- 2.Joiners: approved access, granted through rolesLesson · 20 min
- 3.Movers and leaversLesson · 24 min
- 4.Access reviews that end in actionLesson · 21 min
- 5.Joiners, movers and leavers: granting, removing and reviewing access: knowledge checkKnowledge check · 19 questions
- 6.Final exam9 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.