Use case: the mover — when someone changes teams, access should follow
A mover request adjusts what a person can reach as a tracked change, so access matches the role, not the history.
Lifecycle: day-one access, day-zero offboarding
Joiners, movers and leavers as governed requests — approvals in order, execution automatic, evidence built in.