Glossary

Term	Definition
Connector	An integration with one of your systems. Every connector is either a source or a target.
Source	An HRIS from which Klef pulls its worker data.
Target	A connector Klef writes to.
Worker model	Klef’s own record of each worker.
Desired state	What should be true for a worker: the accounts and access they should have, given who they are and their lifecycle stage.
Lifecycle stage	Where a worker is right now: Pre-start, Active, Leave, Suspended, or Terminated. These correspond to different stages in a worker’s employment lifecycle.
Mastering	Taking a worker field’s value from a connected system instead of your HRIS, by targeting the Worker model. The one case where the Worker model is written to.
Operation	A single change in a plan: one create, update, or delete on one object in one system.
Plan	The result of running a policy: the operations needed to make reality match desired state. You review it before it applies, or let it apply on a schedule.
Reconciler	The engine that compares desired state to your live systems and produces a plan.
Resource	A reusable piece a policy uses: a script, a lookup table, or a secret.
Segment	A saved group of workers, defined by conditions over their attributes. A policy applies to one segment. Segments are shared, so editing one moves every policy that uses it.
Worker	Klef’s record of one person: their attributes, jobs, and lifecycle stage.
Policy	A rule that sets the desired state for a group of workers at each lifecycle stage.