The decision
Use explicit approved role mappings and keep exceptions reviewable. Account creation should implement an authorised access decision rather than assume all starters need the same permissions.
Rehearse this before accepting the change
Provision a fictional limited-role starter in the test environment.
Use fictional examples and an authorised test environment. Record what happened, the evidence you inspected and any issue that still needs a responsible owner.
Choose a useful measure
Track grants that differ from the approved role mapping.
Agree the definition and baseline with the team doing the work. Review the result over a comparable period and note other changes that could affect it.
Your planning worksheet
Use these checks to prepare a discussion with your team or supplier. Tick a check when you have recorded the decision or evidence, rather than when a feature has simply been promised.
Entries stay in this page and are not submitted to Kay & Co. Download your notes before leaving; the page does not save them.
Further reading
These primary sources provide additional context for the project decisions above.
Related decisions
Turn the brief into a working service
Kay & Co. can help you scope the work, design the experience and deliver the right solution for your organisation.
Explore integrations & data services or discuss your project.
Try the free Healthcare Digital Planner to find your starting priority.