Abstract: In an example method, a system obtains a data record indicating an anticipated change in an employment status of a user at an organization, including a data field indicating an effective time of the anticipated change. At a first time prior to the effective time, the system modifies an access privilege of the user with respect to computer resources of the organization, including (i) allowing the user to perform first operations using the computer resources between the first time and a second time subsequent to the first time, and (ii) preventing the user from performing second operations using the computer resources starting at the first time. At the second time, the system further modifies the access privilege of the user, including preventing the user from performing the operations using the computer resources starting at the second time.

Abstract: Systems and methods include a computer-implemented method for multi-stage approval. Approval scenarios are defined that include four stages including a requestor review stage, a requestor management approval stage, an owner approval stage, and a processing stage. A custom proponent code authority is generated for each principal or collection of principals to manage access and roles under their jurisdiction. The custom proponent code authority is generated for each approval scenario through a centralized identity and access management system. A requester review is performed on a request received from a requestor. The requester review is performed using a decentralized approval process. A requestor management approval of the request is performed in the requestor management approval stage. An owner approval is performed in the owner approval stage by an owner associated with owner role names mapped to role suffixes. The owner approval authorizes further processing or access to at least one resource.

Abstract: In an example method, a system obtains a data record indicating an anticipated change in an employment status of a user at an organization, including a data field indicating an effective time of the anticipated change. At a first time prior to the effective time, the system modifies an access privilege of the user with respect to computer resources of the organization, including (i) allowing the user to perform first operations using the computer resources between the first time and a second time subsequent to the first time, and (ii) preventing the user from performing second operations using the computer resources starting at the first time. At the second time, the system further modifies the access privilege of the user, including preventing the user from performing the operations using the computer resources starting at the second time.