STAGE 1: Define the access model
Concept: Authentication proves identity; authorization controls permitted actions.
Task: List roles, resources and allowed actions for a fictional learning platform.
Acceptance: Separate ordinary use from administrative access.

My assumptions:

My work / file link:

My checks and results:

What I changed:


STAGE 2: Apply least privilege
Concept: Access should match a defined task and approval.
Task: Review the supplied grants for unnecessary privileges and stale ownership.
Acceptance: Do not remove or add real access as part of the exercise.

My assumptions:

My work / file link:

My checks and results:

What I changed:


STAGE 3: Handle lifecycle changes
Concept: A role change can leave old privileges behind.
Task: Design joiner, mover and leaver checklists with evidence and timing requirements.
Acceptance: A mover review covers old access as well as new access.

My assumptions:

My work / file link:

My checks and results:

What I changed:


STAGE 4: Document the review
Concept: A decision needs a reviewer, reason and follow-up.
Task: Write keep, remove or investigate recommendations with a named fictional owner.
Acceptance: Label unresolved business need as pending rather than inventing approval.

My assumptions:

My work / file link:

My checks and results:

What I changed:
