Employee Lifecycle Agent
Finds the access that outlived the job
5 of 10 access changes were late or are still open.
10 events checked. 5 are late or open, for 12 risk points. The longest delay is 34 days.
Fix Dana R. first. Finance has the most late changes.
Which systems each person had is not in the data: this checks timing of the access change, not what it covered.
Why rows were flagged
- Leaver access not removed within 1 day60%
- Mover access not adjusted within 7 days20%
- Joiner access not set up within 5 days20%
Value flagged by Department
- Finance2
- Engineering2
- Support1
Access changes to fix, highest risk first
| Item | Department | Value | Days late | Why |
|---|---|---|---|---|
| Dana R. | Finance | 3 | 31 | Leaver access not removed within 1 day |
| Yusuf M. | Engineering | 3 | 17 | Leaver access not removed within 1 day |
| Ali B. | Support | 3 | 3 | Leaver access not removed within 1 day |
| Noor T. | Finance | 2 | 34 | Mover access not adjusted within 7 days |
| Lina S. | Engineering | 1 | 4 | Joiner access not set up within 5 days |
What to do this week
- Remove access for Dana R. now: a leaver with live access is the biggest risk.
- Review Finance: it has the most late changes.
- Connect HR leavers to account removal so it happens the same day.
Do
- Remove a leaver's access on their last day, not the week after.
Don't
- Don't leave a mover with both old and new access.
How to improve
- Add the list of systems per person so the next report can say what is still open.
- Add the last login date so the next report can spot leavers who still sign in.
Demo
Overview
Joining works because someone is waiting for a laptop and complains. Leaving fails quietly: the person has gone, nobody is inconvenienced by their still-active account, and it surfaces in an access review a year later or in an incident.
The middle case is worse. Someone changes role and gains the new team's access without losing the old team's, and after three internal moves one person can approve a purchase order, raise the invoice and release the payment. That is the textbook segregation-of-duties failure, and an organisation doing nothing wrong builds it one promotion at a time.
This agent reconciles the employment record against what people can actually reach. It reports access that outlived a leaver, access a mover kept from a previous role, joiners still waiting on something their role needs, and the combinations that let one person complete a transaction end to end. It also finds what left with someone — the process only they knew, the account only they could access.
It revokes nothing. Removing someone's access is an action with employment and operational consequences, and it belongs to a person who can see the context this agent cannot.
Benefits
Access reviews stop being a scramble
The findings are already known and already being fixed.
The dangerous combination found early
Before it is used, deliberately or by accident.
Leavers actually leave
Including the systems nobody remembered they were on.
What it does
Finds access that outlived the job
Leavers still holding accounts. It fails silently because nobody is inconvenienced by it.
Catches accumulated access from moves
The new team's permissions added, the old team's never removed. Three promotions and one person can run a transaction end to end.
Names the dangerous combinations
Approve, raise and release held by one person — the finding auditors look for first.
Finds the joiner still waiting
Someone in post for three weeks without something their role requires, which nobody logged.
Reports what left with a person
The process only they ran and the account only they could reach — found while it can still be recovered.
Revokes nothing
Removing access has employment and operational consequences. It belongs to a person who can see what this cannot.
What this changes
What this changes about your week
- It takes over
- Reconciling who works here against what they can still reach, across every system.
- Done today by
- IT and HR separately, neither holding both halves.
- How often
- Quarterly in theory. In practice, the week before an audit.
- Typical manual effort
- Days of exporting access lists and matching them to a staff list by hand.
Why People and hiring in particular. Identity tools track accounts, HR systems track employment, and almost nobody reconciles the two. Every finding lives in that gap — including the person who, after two internal moves, can raise a purchase order, approve it and release the payment.
Runs unattended
Started by you or by an event, and it finishes on its own. Nothing waits for someone to be at a desk.
The same standard every time
The two-hundredth item is held to the bar the first one was. Consistency is the part people cannot sustain.
It cannot act on its own
Employee Lifecycle Agent has no path to sending, spending or committing. That limit is why its output is safe to act on.
How it runs
This agent runs server-side through the PROMIVO runtime. Each run is logged step by step and every tool call is permission-checked before it executes.
- 1InputValidated against the agent input schema
- 2Modelclaude-opus-5 with automatic fallback
- 3Toolssearch_knowledge, extract_structured_data
- 4PermissionsRuns READ actions automatically; anything higher waits for approval
- 5OutputStructured result matching the output schema
- 6LoggingTokens, duration and every step recorded
Requirements
Integrations
No integrations required.
Before you start
- Your people and their current roles, including joiners, movers and leavers
- What each system's access is granted by
- A knowledge base holding your access policy and role definitions
- Requires the All-Access plan or higher
Use cases
After a leaver
Everything still open in their name, in one list.
Quarterly access review
What an auditor would raise, before they raise it.
After a reorganisation
Where moves left people holding two roles' worth of access.
Before an audit or certification
The segregation findings, found by you first.
Pricing
All-Access
Billed monthly through your PROMIVO subscription. Cancel at any time.
Runs consume your plan allowance for agent executions and tokens. See plan limits
FAQ
Does it remove access?
No, and it must not. Revoking someone's access mid-project or mid-dispute has consequences this agent cannot see. It produces the list; a person acts on it.
How is this different from an identity tool?
Identity tools track accounts and HR systems track employment. Almost nobody reconciles the two, and every finding lives in the gap between them. That reconciliation is the whole product.
Does it assess people?
Never. It reports access against roles. Holding access you no longer need is a process failure, not a personal one, and the report says so.
Reviews
Reviews open once customers have run this agent.
Need this agent to work differently?
Tell us what to change and our team will scope a customised version for your business.
Customize this agent