Following up on the ideas of other questions of this sort.
SharePoint controls permissions by group or individual permissions
I have been asked why we can not control it by Role, instead.
I am in the role XYZ today, I have a set of permissions, because I am
in a group or it has been assigned individually. I change jobs,
therefore my role has changed. I should lose permissions to certain
group/individual sites (Contributor to Reader) and I should gain
permissions in other areas (Reader to Full control).
SharePoint makes each site owner go in and changed those things
manually, when they have time and if they remember.
Personnel, here, changes my job (with its roles) from XYZ to my new
job Janitor. This information is passed to the Active Directory, and
is therefore available to SharePoint.
Anyone doing this out there?