Account lifecycle

An account lifecycle in six stages (request, approval, provisioning, active access, periodic review, role change) with an immediate revocation path on termination, the sample record for each stage (request form, approval, provisioning ticket, review, role change and revocation records) and principles of least privilege and timely revocation.