Start with responsibility
Before choosing permissions, write down the work the person is expected to do. A worker, a manager, an HR reviewer and a payroll approver need different working perspectives.
Separate the privilege from the scope
The privilege describes what someone may do. Organizational scope describes where that responsibility applies. A reviewer can work across several entities while still having a defined boundary.
Give temporary assignments a period
A start date and end date make temporary coverage clearer. Keep the assignment period alongside its purpose and organizational scope.
Keep a reviewable story
When access changes, the assignment history should help an authorized reviewer understand the decision. Review both what was granted and whether the responsibility still applies.
Explore these connections in PeopleArc.
See the product perspective