What is joiner-mover-leaver?
Joiner-mover-leaver is the access control process covering the three points at which a person's access should change — when they join, when they change role, and when they leave.
Also called JML.
The leaver step is the one that fails, and the mover step is the one nobody runs at all. Someone who moves from the social team to another department usually keeps every grant they had, because no process is triggered by a move.
On social accounts the failure is more likely than elsewhere for a structural reason: the accounts are not connected to the identity provider, so none of the automation that handles the rest of the estate applies to them. Offboarding depends on someone remembering a list.
A workable JML process for social needs an inventory first. You cannot remove access from accounts you do not know exist.
Related terms
- SCIMSCIM is the open standard that lets an identity provider push user accounts and group membership into another system automatically, so joiners and leavers propagate without anyone doing it by hand.
- Ghost accessGhost access is a live grant on an account held by someone who should no longer have it — a former employee, a finished agency, a contractor whose engagement ended.
- Social media governanceSocial media governance is the set of controls that establishes who owns a brand's social accounts, who can reach them and how that access is granted and removed — as distinct from managing what gets published on them.
- Account takeoverAccount takeover is an attacker gaining control of a legitimate account, and on corporate social accounts it almost always happens through people and process rather than through the platform itself.