Confirm your authority to grant access
Distinguish company equipment, managed client assets and third-party platforms. Authorization must come from someone entitled to make that decision.
List the systems involved
Specify domains, environments and the issue scope. Do not hand over all accounts at once.
Discuss access before providing it
Ask the engineer to explain the permissions needed and why. Agree on temporary access, when it ends and how it will be revoked.
Record backup and maintenance requirements
Agree on who confirms backups, whether a maintenance window is needed and how to communicate if work cannot proceed as expected.
Confirm the handover when work ends
Review completed work, temporary account removal and credential rotation recommendations. Keep the necessary delivery records.