Temporary access is granted when the institution has the least time to design it.
Where this breaks
The project ends, ownership diffuses and the account remains as an undocumented alternate path.
The operating move
Use automatic expiry, named sponsorship and task-specific privilege. Extension should be a new decision, not silence.
Value object — The operational card
- Sponsor and purpose
- Exact permissions
- Automatic end
- Closure evidence
The test
Search for accounts created during the last urgent project. Every active orphan proves temporary access became permanent.