Short engagements are where access control quietly falls apart. Somebody needs four accounts for six weeks, setting up a proper role feels like overkill, and so they get the shared login that already exists.
A view, not an account list
Scoped views are defined by a condition rather than by ticking accounts one at a time. Everything owned by this person, or tagged for this project. When an account leaves the project it leaves the view, and nobody has to remember to remove it.
Expiry is part of the grant
Access carries an end date when it is issued. The engagement ends on the eleventh, the view closes on the eleventh, and the audit trail keeps what was seen while it was open.
Leave a Reply