It's important for IT staff to monitor changes in employees' status within the organization. Employees may join the company in one role, with specific permissions, and move into another role with different responsibilities and permissions. However, it's easy for IT departments to fall into the trap of providing just the new permissions and not removing old and/or outdated group assignments, permissions, and rights. This article provides simple, real-world tips for tracking user demotions, promotions, and lateral moves and maintaining proper and accurate user and group account assignments and permissions with those changes.
