People lifecycle

Onboarding · role changes · offboarding. Model a person's role, compute exactly what to grant and revoke, and keep the evidence that it happened.