Role management.

At PwC, I designed a role-based access model for a Fortune 500 airline’s employee app, defining what 80,000+ employees across 40 roles could see and do.

the role-management challenge ↓

Problem: how do we manage app access for +80,000 employees?

01. I mapped
access needs.

I reviewed data extracts and spoke with teams across the hierarchy to understand how responsibilities should translate into access.

one pool of employees · one dot ≈ 1,000 people

02. I looked beyond
departments.

Access needed to reflect both where someone worked and the job they did.

03. I turned codes
into roles.

I combined department and job codes to map employees into 40 access roles.

one dot ≈ 1,000 employees
≈80,000 employees · 5 departments
illustrative department split

04. I made room
for exceptions.

We gave the support team a manual route to grant access when the standard mapping didn’t fit.

Inflight

Job code AJob code B

Flight Ops

Job code AJob code B
Role AInflight + job code A

Permissions

ViewUpdate
Exception pathManual access through support
Illustrative role and permissions

05. We tested
the model and launched.

We put the model through user acceptance testing before rollout.