Provisioning

Joiner Mover Leaver

Joiner Mover Leaver, or JML, is the lifecycle model that describes identity and access changes when a person joins, changes role, or leaves an organization.

Acronym
JML
Synonym
JML

Definition

Joiner Mover Leaver, or JML, is the core identity lifecycle model used in IAM to structure provisioning and deprovisioning around workforce events. A joiner event triggers onboarding and initial access setup. A mover event reflects an internal change such as transfer, promotion, department change, or job function shift, requiring recalculation of access. A leaver event triggers access revocation, account disablement, and cleanup. The JML model is conceptually simple but operationally demanding because it depends on timely upstream data, clear business rules, downstream integration, exception handling, and accurate correlation across many systems.

Why it matters

JML is the backbone of workforce access lifecycle automation and one of the most visible IAM control domains in audits.

The Ariovis perspective

Ariovis promotes automation that remains explainable and recoverable: explicit rules, approvals where needed, logs, error handling and recovery mechanisms.

Related services

Common pitfalls

  • A frequent pitfall is handling joiners reasonably well while neglecting movers and leavers, where access drift and residual exposure are often highest.

These concepts matter most inside a real project.

The first conversation helps establish your context, the systems involved and the next useful decision.