Use case
Joiner, mover, leaver — without the spreadsheet
Map people to roles, roles to vaults. Access changes happen when the role changes, and the audit trail proves it.
Onboarding and offboarding are role changes, not checklists.
Role-driven onboarding
New hires inherit access through their role assignment. No one-off folder shares, no DM threads asking who has the login.
Mover changes that propagate
When someone changes team, their role changes — and their access changes with it. Old scope is removed in the same operation.
Clean leaver flow
Removing a person removes their access everywhere Keystacker governs. The sequence is recorded for HR, IT, and audit.