Access provisioning
Grant and maintain least-privilege access to coworking spaces and systems only after authorized human review of identity, role, site, and dates.
Primary roles: operations-manager, technical-operator, community-manager
Stages
1. Authorize the request
An accountable staff member verifies the person, business need, locations, hours, and start and end dates.
Manual tasks
- Verify the requester and approving authority
- Choose the minimum access needed for the approved period
Automation opportunities
- Route requests to the correct approver
- Flag missing dates or unusually broad access
Suggested tools
- None documented.
Risks
- Informal approval can grant access without clear accountability
2. Provision approved access
Technical or operations staff create approved identities and credentials, then test the result without broadening scope.
Manual tasks
- Review generated group and door assignments before activation
- Test a representative login or entry path
Automation opportunities
- Prepare account and group changes from an approved request
- Record provisioning outcomes and exceptions
Suggested tools
Risks
- Incorrect mappings can expose restricted systems or areas
- A successful system update does not prove physical access is safe
3. Review and expire access
Named owners periodically confirm that access is still justified and remove it promptly when the approved period ends.
Manual tasks
- Review exceptions and access that lacks an owner or end date
- Confirm revocation across physical and digital systems
Automation opportunities
- Notify owners before access expires
- Generate a stale-access list for human review
Suggested tools
Risks
- Dormant credentials can persist if systems are not reconciled
Success metrics
- Median time from approval to tested access
- Percentage of active credentials with an owner and review date
- Number of access exceptions found during periodic review
Last reviewed: 2026-07-18