Team access: the right information for the right people
A practical approach to roles and assignments, so everyday work does not depend on shared passwords or access to everything.

Start with responsibilities, not job titles
Two people with the same title may do different work. One stays with a particular group, while another provides cover across several settings. Before assigning access, write down the actual tasks: which information the person needs to read, what they need to change and whom they should be able to contact.
Then match a role and a scope. The role describes the kind of activity; the scope determines where it is allowed. This distinction helps prevent access to one group from quietly becoming access to the whole organisation simply because a broader option was easier to select during setup.
Give each person their own account
A shared account can seem convenient until the first staffing change. It then becomes difficult to identify who performed an action or whose access should end. Individual accounts let you assign responsibility, change one person’s scope and revoke their sessions without interrupting everybody else’s work.
Do not use password sharing as a shortcut for cover. Assign the covering colleague an appropriate workspace and decide when that access should be removed. If support is needed, check for a supervised viewing option. A support view should be visible, time-limited and distinguishable from the account holder’s own actions.
A group change is an access change
Access reviews matter beyond a person joining or leaving. A child moving groups, temporary cover, a new room or expanded duties can all change what someone needs. Add an assignment check to the process for those changes, rather than relying on one person to remember every detail afterwards.
Consider existing conversations and documents too. Removing a button for new messages is not enough if someone can still open history outside their current scope. During a test, try a direct link and a tab opened before the change. Access should follow current assignments rather than old assumptions.
Review a simple list regularly
Choose someone to make a short review of accounts. Check active users, their roles, settings and groups. Look for old cover arrangements and accounts belonging to people who no longer work with the organisation. You do not need an elaborate report if the underlying list is accurate and clear.
Record the reason for important changes and use activity logs to investigate specific events. A log does not replace a suitable assignment or a conversation with the team. The most useful rule is consistent: give people what their tasks require, then review access whenever those tasks change.
Combine individual accounts with a role and a specific scope. Review access whenever responsibilities change.

