Joiner-Mover-Leaver (JML)
The lifecycle discipline that keeps an identity's access equal to what its current relationship with the organization actually justifies.
aka: JML
JML tracks an identity through a state machine — prospective, active, suspended, terminated, deleted — and each transition has a job: a Joiner gets birthright access provisioned, a Mover should have old access retired as new access is granted, and a Leaver gets deprovisioned fast. Skipping the “retire” half of a Mover event is the single most common cause of privilege creep.