Joiner, Mover, Leaver: Identity Lifecycle and Access Reviews
<p>Kosh Finance (fictional) has named accounts now, and the hard part has started: people join, change teams and leave every week, and access has to follow. Auditors want proof that leavers lose access the day they go, that movers don't keep their old access, that MFA is enforced, and that someone reviews who sits in the sensitive groups.</p><p>In four lessons you learn the joiner-mover-leaver (JML) lifecycle and role matrices, conditional access policies (require MFA, block legacy authentication), and how to run an access review that actually removes access. You do the work in Bartman's in-browser Identity Console, a directory in the style of Entra ID or Okta, on a staff list, HR feed and review generated for you.</p><p>Part of the Bartman Cybersecurity track (Professional Certificate in Cybersecurity, LSBF).</p>
Tools: Identity governance, JML, Conditional access, MFA, Access reviews, Entra ID / Okta concepts