IT Glossary
The Joiner-Mover-Leaver (JML) process manages access across the employee lifecycle. Learn how JML works, its three stages, and how Corma automates it.
July 3, 2026
The Joiner-Mover-Leaver (JML) process is the framework for managing a user's access across the three key stages of their time at a company: joining (onboarding and provisioning), moving (role or team changes that require access adjustments), and leaving (offboarding and deprovisioning). It keeps access accurate and least-privileged from the first day to the last.
The JML process breaks into three stages. At the joiner stage, role-based access is provisioned; done poorly it causes slow onboarding or over-granting. At the mover stage, access is adjusted and stale rights removed; neglected, it leads to permission creep and accumulated rights. At the leaver stage, all access is revoked and licenses reclaimed; missed, it leaves orphaned accounts and wasted spend.
A new analyst joins and gets the BI tool, data warehouse, and Slack on day one. Six months later they move to finance, so warehouse access is swapped for the ERP. When they leave, all of it is revoked at once. The "mover" stage is the most neglected: people accumulate access as they change roles and rarely lose the old rights, which is how excessive access quietly builds up.
Joiner, Mover, Leaver. It describes the three lifecycle stages at which a user's access must be created, adjusted, or removed.
The "mover" stage. People gain access with each role change but rarely lose old rights, which causes permission creep and excessive access.
By connecting the HR system as the source of truth, so hires, role changes, and departures automatically trigger provisioning, adjustment, and deprovisioning across apps.
