What it is (plain English)
Automates the access side of joining, moving, and leaving: when someone starts, changes role, or leaves, the right accounts and entitlements are created, adjusted, or revoked across connected systems — governed, logged, and timely, instead of manual tickets and lingering access.
Problems it solves
- New hires waiting days for accounts and access.
- Ex-employees keeping access long after they've left (a security and audit risk).
- Access changes on role moves handled inconsistently.
- No audit trail of who was granted what, when, and why.
What must exist first
Platform Core Setup and Integration Foundation — ALE orchestrates access across target systems, so those integrations are essential. HR events (often from HR Service Delivery (HRSD)/HCM) are the usual trigger.
What the customer needs to provide
- The target systems to provision into and their APIs/connectors.
- Your joiner/mover/leaver policies: who gets what access by role.
- The authoritative trigger source (HR system events).
- Approval and governance rules for access grants.
Where it can go next
Triggered by HR Service Delivery (HRSD) onboarding; strengthens security posture and audit; complements broader identity governance programs.