06/23/2026
Why Joiner-Mover-Leaver Is the Heart of IAM
A new employee joins.
An existing employee changes departments.
Another employee leaves the company.
Sounds simple, right?
For IAM teams, these three events drive almost everything.
This is called the **Joiner-Mover-Leaver process**.
And if this process is weak, access risk increases fast.
1๏ธโฃ Joiner โ New Employee Joins
When someone joins a company, IAM helps ensure they get the right access from day one.
This may include:
๐น Email account
๐น Business applications
๐น Department-based access
๐น Role-based access
๐น MFA setup
The goal is not just to create accounts.
The goal is to give the **right access** based on the personโs role.
2๏ธโฃ Mover โ Employee Changes Role
This is where many organizations struggle.
When someone moves from one department to another, their access should change too.
For example:
A user moves from Finance to HR.
They may need HR access now.
But should they still keep Finance access?
Probably not.
Mover processes help update access and remove permissions that are no longer required.
3๏ธโฃ Leaver โ Employee Leaves
This is one of the most critical IAM processes.
When an employee leaves, their access must be removed quickly.
That means:
๐น Disable accounts
๐น Remove application access
๐น Revoke privileged access
๐น Remove group memberships
๐น Prevent orphan accounts
Because one active account after termination can become a serious security risk.
Hereโs the truth:
IAM is not just about giving access.
It is about managing access throughout the full identity lifecycle.
From joiningโฆ
To movingโฆ
To leaving.
Thatโs why Joiner-Mover-Leaver is one of the most important processes in Identity & Access Management.
If youโre learning IAM, donโt skip JML.
It connects everything:
๐ Access Management
โ๏ธ Provisioning
๐ฅ Role Management
๐ Governance
๐ก Security
Master this concept, and youโll understand how IAM works in real companies.
๐
book a free IAM roadmap call:
https://calendly.com/dominic-levelupiam/30min?month=2026-06
This link will take you to a page thatโs not on LinkedIn