Modify access permissions
Apply an authorized change to physical or digital access after checking current entitlement, conflicts, effective timing, and downstream dependencies.
| Field | Value |
|---|---|
| Business area | access-network-printing |
| Primary role | it-security-administrator |
| Frequency | event-driven |
| Privacy sensitivity | high |
| Security sensitivity | high |
| Compliance review | needed |
Trigger and handoff
Trigger: A member role, product, location, risk condition, or approved exception changes.
Inputs
- Authorized change request
- Current access
- Effective date and dependency context
Outputs
- Updated least-privilege access
- Change evidence
- Rejected or escalated conflict
Current manual methods
- Direct admin edit
- Chat request
- Clone another account
Human judgment and approvals
-
Evaluate aggregate access and conflict risk
-
Plan timing to avoid unsafe lockout or excess access
-
Approval: Entitlement owner approves change; security owner approves exceptions
Failure modes
- Old permissions remain alongside new ones
- Urgent request bypasses authorization
Success metrics
- Changes match approved effective state
- No residual privilege remains without documented need