Offboarding receives attention. Role change quietly accumulates access.
Where this breaks
A temporary assistant keeps medical files; a finance employee retains household records; a promoted manager inherits new privileges without losing old ones.
The operating move
Review access around the new purpose, not the old title. Remove prior rights before adding the new set.
Value object — The operational card
- Old role access
- New task need
- Sensitive combinations
- Removal evidence
The test
Move one person between roles in a test. If nobody can state what must disappear, the institution is granting permanent memory.