Your People Change. So Should Your Access.
A national retail and hospitality operator with 30,000+ team members across 750+ locations couldn't keep org-chart roles in line with how people really worked. Here's how CINQUE gave them an RBAC framework and day-one access their business can understand and maintain.
Customer name withheld at the customer's request.
Does this sound familiar?
Thirty thousand people. Corporate staff, field teams, and hourly workers across food service, operations, and the front counter. Dozens of job functions. People changing roles every week, and seasonal hires arriving every spring.
Their roles came from the org chart. The org chart didn't match the work. So access drifted, one exception at a time.
- Roles built on org charts, not on how people work
- Access that outlived the job: people changed positions and kept old permissions
- Seasonal and part-time workers got the same broad access as full-time staff
- Audits turned up access nobody could justify
The real cost of getting this wrong
- Manual role reviews eating IT time that should go to the business
- Static roles that break every time the company grows or adds a brand
- Regulators and cyber insurers looking harder at access governance
- The wrong access slowing down employees and IT alike
Rewriting the org chart wouldn't fix it. The roles had to come from the work itself.
Roles built from behavior, not assumptions
CINQUE skipped the org chart. It read real access patterns across the workforce and surfaced personas that match how people work in corporate, field, and hourly roles. Loom Security's team used those personas to design an RBAC framework and birthright roles the business can understand, trust, and keep up to date.
Behavior-based personas
Roles built from real access patterns, not job-title guesses.
Birthright roles
Designed so new hires start with the right access on day one, without one-off requests.
A role structure that keeps up
Built to adjust as roles, locations, and seasons change.
Audit-ready governance
Every access decision traces back to a business reason.
Roles people recognize
If your roles still come from the org chart, you're managing access for the company on paper. Not the one that shows up to work.
See the personas hiding in your workforce
Send one export from your identity provider. In a Persona Discovery Workshop, our team walks you through the personas CINQUE finds, and the people, service accounts, and AI agents that don't fit.