Joiner/Mover/Leaver Process (Why It Prevents Access Chaos)
Last updated
May 14, 2026
Reviewed by
Reviewed by: IT Service Delivery Lead
Speakable Summary
A joiner/mover/leaver process is a simplechecklist for adding, changing, and removing access. It prevents access chaosby making ownership, timing, and approvals predictable.
Opening
Most access problems are not hacking. They aremessy onboarding, rushed role changes, and incomplete offboarding.
That creates real business pain. New hirescannot work on day one. People keep access they should not have. Sharedmailboxes and files become confusing. And the office manager becomes themiddleman for every change.
A joiner/mover/leaver process fixes this bymaking access changes repeatable and documented.
Direct Answer
A joiner/mover/leaver process is a repeatableway to grant, change, and remove access when staff join, change roles, orleave. It prevents access chaos by standardizing requests, approvals, andverification so nothing important is missed.
LINK: Onboarding Checklist
LINK: Offboarding Checklist
LINK: Approvals for Changes
What “access chaos” looks like
● A new hire starts and cannot login, print, or reach shared files
● Managers request access changes inhallway conversations
● People keep access after rolechanges
● Departed staff still have activeaccounts or app sessions
● Shared mailboxes and permissionsare inconsistent
● Vendors and SaaS tools have noclear “who owns access”
● The office manager is stuckchasing IT and department leads
What the process is in plain English
Joiner
A new person starts and needs a standard setup.
Mover
An existing person changes role and needs access changed cleanly.
Leaver
A person leaves and access must be removed quickly and consistently.
The goal is simple. Access changes happen thesame way every time, with a record, an approval, and verification.
What a joiner/mover/leaver process must include
1) One request path
All requests must come through the support frontdoor. Ticket portal or email-to-ticket.
No texts. No side conversations. If it is not ina ticket, it does not happen.
2) A standard intake form
The process fails when IT has to guess details.
A joiner request should include
● Start date and time zone
● Job role and manager
● Location and device needs
● Core apps needed
● Email display name anddistribution groups
● Shared mailbox needs if required
● Any special access required
A mover request should include
● Effective date of role change
● Access to add and access to remove
● What should happen to sharedresources and delegations
● Manager approval
A leaver request should include
● Last working day and time
● Immediate disable time if needed
● Mailbox handling choice
● File ownership transfer choice
● Any vendor portals the person hadaccess to
3) Clear approvals
Access is a business decision, not a techniciandecision.
Approvals should come from the manager or thedesignated approver. IT should not guess who should have access.
4) A standard access model
If every user is custom, access becomes chaos.
Most SMBs need role-based access standards.Basic role templates keep onboarding fast and reduce repeat confusion.
5) Verification steps
A process is not complete until it is verified.
Joiner verification
● User can log in
● MFA is set
● Email works
● Core apps work
● Printer and Wi-Fi work if required
● Shared files and shared mailboxaccess works
Mover verification
● Old access removed
● New access working
● Delegations and shared mailboxescorrect
● No unexpected access remains
Leaver verification
● Account disabled
● Sessions revoked
● MFA methods removed or reset asrequired
● Vendor access removed
● Shared mailbox delegationsreviewed
● Files transferred or locked per policy
LINK: MFA Explained
LINK: Shared Mailboxes and Permissions
Why it prevents access chaos
It removes guesswork
When requests are standardized, IT does not haveto ask ten questions every time. It also reduces back-and-forth with managers.
It reduces security risk without fear tactics
Most access risk is simple. Old access is notremoved. Admin rights grow. Vendor accounts get forgotten.
A consistent leaver process reduces the biggestgaps. It also supports insurance readiness and audits when needed.
LINK: Cyber Insurance Readiness
LINK: Incident Response Plan Basics
It reduces office manager stress
Office managers stop being the router for accessrequests. The process becomes the router.
It reduces “permission sprawl”
Mover steps remove old access instead ofstacking new access on top. That prevents the common “everyone ends up witheverything” problem.
It prevents vendor portal surprises
Leavers often have access to billing portals,marketing tools, and vendor dashboards. If you do not remove access, risk andconfusion increases.
We are Optitech provide the best quality It solution neque porro quisquam est qui dolorem ipsum quia golor sit amet, conse ctetur, adipisci velit, sed eligendi optio cumque nihil impedit quo minus id quod maxime plac eat take a trivial example, which of us ever undertakes laborious physical exercise, except to obtain some an advantage take a trivial example, which of us ever undertakes laborious physical exercise, except to obtain some advantage from more than a great system of the maintainance several way done
Optitech is the same is the same of the maintain the majororro quisquam est qui dolorem ipsum quia golor sit amet, conse ctetur, adipisci velit, sed eligendi optio cumque nihil impedit quo minus id quod maxime plac eat take a trivial example, which of us ever undertakes laborious physical exercise, except to obtain
- IT Management provide the most service neque porro quisquam est qui dolorem ipsum quia golor sit amet, conse ctetur, adipisci velit is the more than effective way to solve the quisquam est, qui dolorem ipsum quia dolor sit amet, consectetur, velit, sed quia non numquam
- IT Management provide the most service neque porro quisquam est qui dolorem ipsum quia golor sit amet, conse ctetur, adipisci velit is the more than effective way to solve the quisquam est, qui dolorem ipsum quia dolor sit amet, consectetur, velit, sed quia non numquam
- IT Management provide the most service neque porro quisquam est qui dolorem ipsum quia golor sit amet, conse ctetur, adipisci velit is the more than effective way to solve the quisquam est, qui dolorem ipsum quia dolor sit amet, consectetur, velit, sed quia non numquam
Optitech is the same is the same of the maintain the majororro quisquam est qui dolorem ipsum quia golor sit amet, conse ctetur, adipisci velit, sed eligendi optio cumque nihil impedit quo minus id quod maxime plac eat take a trivial example, which of us ever undertakes laborious physical exercise, except to obtain
We are Optitech provide the best quality It solution neque porro quisquam est qui dolore ipsum quia golor sit amet, conse ctetur, adipisci velit, sed eligendi optio cumque nihil take a trivial example, which of us ever undertakes laborious physical exercise except
We are Optitech provide the best quality It solution neque porro quisquam est qui dolorem ipsum quia golor sit amet, conse ctetur, adipisci velit, sed eligendi optio cumque nihil impedit quo minus id quod maxime plac eat take a trivial example, which of us ever undertakes laborious physical exercise, except to obtain some an advantage take a trivial example, which of us ever undertakes laborious physical exercis
Former-employee access is prevented by disablingaccounts fast, revoking sessions, and removing access across email, apps, anddevices. The controls that work are a written leaver checklist, clearownership, and verification.
