Access is the gateway to the crown jewels of an organization, which were the research work deliverables in this case. The client realised the importance of effective access controls as an important line of defence to protect their assets against inappropriate access. They wanted to implement the principle of least privilege and separation of duties while granting the minimum required access only when it is needed. Regular rotation of staff between departments and attrition made it very challenging for them to maintain only authorised access to their systems without impacting productivity.