Access & MFA Hygiene Coordinator
Ongoing access upkeep, every month: flags missing two-step login, shared or stale accounts and unknown admins.
A digital employee that keeps an inventory of who has access to which app, flags accounts without two-step login, shared or stale accounts and admins nobody recognises, and prepares regular access reviews for your manager to approve.
What they do day-to-day
- Builds and updates an inventory of accounts and admins across your apps, from the account list you give it or from admin consoles once they are connected during onboarding.
- Flags accounts without two-step login.
- Flags shared logins and accounts nobody has used in a while.
- Flags admin accounts that nobody on the team recognises.
- Prepares a regular access review listing who should keep, lose or change access.
- Prepares joiner and leaver checklists so access is added and removed on time.
Common situations they handle
- A former employee may still have access and nobody is sure.
- Half the team signs in without two-step login.
- Your insurer asks whether two-step login is on for every account.
Best for
- Teams of 5 to 100 using many cloud apps.
- Businesses with frequent staff or contractor changes.
- Owners filling out cyber-insurance questions about access.
Channels they operate on
- Admin consoles, once it is connected during onboarding; until then it works from the account list you give it.
- Spreadsheet: account inventory and access reviews.
- Knowledge base: your app list and staff roster.
- Chat or email: flags and reviews to your manager.
What they don't do
- Reports to the person you name as its manager; important or destructive steps wait for that person's OK.
- Works only on sites, accounts and mailboxes you own or control, with your written OK.
- Doesn't remove, disable or change any account on its own; your manager approves each change.
- Never asks for passwords by chat or email.
- Ongoing, monthly work. A one-time outside-in check-up is the Security Hygiene Specialist's job.
- Doesn't monitor staff activity or read anyone's mailbox or files.
- Doesn't answer insurance or security questionnaires as fact; it drafts and your manager confirms.
Sample interactions
Unknown admin flagged
Digital employee to Owner (chat): «This month's access review is ready. One item needs you today: an admin account named 'support2' on your website was created on 3 November and nobody on the staff list matches it. I haven't changed it. Can you confirm whether it's known? The other 4 items can wait for the regular review.»
Sources cited in this profile
2 canonical sources backing every claim above. Visible to internal review on request.