People change teams, projects end, contractors finish. The work moves on; the access stays. Most environments carry years of entitlements that no current role would justify.
Access tied to role rather than to person, reviewed on a schedule the business actually keeps, removes the majority of that exposure without slowing anyone down.
