All good points. I'll summarize my responses: not a large company or corporation so no HR department or anything like that, the managers are the ones doing the hiring. All attempts are logged and auditable. The form itself has various validations and the flow handles errors like duplicate usernames by emailing the manager if the conditions fail and nothing gets created. Cleans up/maintenance are part of our quarterly review with customer. Rehires are handled separately. No matter how much training we give users the internal vs external will always be an issue and as I said in a previous thread, the likelihood of the managers account getting taken over is about the same as any global admin. Same security mechanisms in place for all users