Why Delegated Access Needs a Defined End Date

The article argues that handling absences by manually changing someone's role often leads to forgotten reversals. It recommends that delegations specify a scope, start and end dates, and an audit entry. Permission checks would then confirm whether a delegation is active for the requested entity and workflow level. The author stresses that the end date is a key security control, not just a convenience. Without it, a temporary replacement could quietly become a lasting privilege.