A new starter needs access today, but the required approval is missing

Instruction: Explain exactly what you can provision now, which request remains blocked, and how you will keep the starter and manager productive without copying another employee’s access.

Context:

A fictional finance analyst starts at 09:00. HR has confirmed the hire and start date in the onboarding system. Policy authorizes email and standard collaboration access after HR confirmation and identity verification. Finance reporting requires the finance application owner’s approval; payroll access is a separate restricted entitlement. The manager emails, “Copy my access, including payroll, so they can start now.” The finance owner has not approved anything. A managed laptop is ready, and non-sensitive induction material is available. You can provision approved standard access and route exceptions, but cannot approve application access yourself.

Updated

Official answer available

Read the opening below, then unlock the full answer and practical guidance.

I would get the starter working with the access already authorized by the HR record, while holding the finance and payroll requests for their proper owners. The manager’s urgency is real, but copying their account would give a new analyst permissions that have not been justified or approved. I would match the starter to the verified HR record using our identity-check procedure, confirm the start time, and provision the standard email and collaboration package...

Related Questions