Joining and invitation
- Who approves the account and initial role?
- How is the correct recipient established?
- What happens to an expired or misdirected invitation?
- Which connected applications also need an account?
Resources / Account lifecycle
Follow the account from invitation to departure.
Use these questions to prepare a scoped review. This checklist does not authorize account changes.
Working and changing roles
- Which tasks and records belong to each role?
- Who approves additional or temporary access?
- How are old permissions removed after a role change?
- Where can an authorized owner review the current access?
Recovery and departure
- What is the approved lost-factor or recovery process?
- Who can help without relying on shared credentials?
- Which sessions, accounts and connected permissions need review when someone leaves?
- Who retains ownership of business records and integrations?
Before a production change
Agree the exact actions, authorized owner, isolated tests and administrative recovery path. Preserve the current configuration evidence securely. Avoid putting secrets or private account exports in ordinary project notes.