Initially, there were no defined processes for access permission management at Jörg Vogelsang GmbH & Co. KG. In the course of an audit, the question of IT approvals arose, which had to be painstakingly searched out individually. Andreas Wittmers, System Administrator of Data Center / IT, and his colleague worked out a manual process for permission assignment and documentation. This mainly consisted of an authorization form, which the folder sponsor completed, and IT as part of the application process. Then, it was filed in a folder by IT and transferred to an Excel spreadsheet by form number. Thus, traceability could be guaranteed anytime, and the search for the corresponding permission assignments was accelerated.