What it means
An employee may leave, transfer departments or take extended leave, and HR, managers, IT, facilities and finance often control different permissions. Agree a trigger and effective time, then list systems, devices, badges, keys, delegated approvals, shared inboxes and vendor portals associated with the person, and check individual access granted outside the standard role template, including temporary project permissions.
For an ordinary departure, schedule removal to preserve needed handover while avoiding access after authority ends, whereas a high-risk exit may need immediate action under policy and applicable law. Do not wipe work records or personal data without checking retention and privacy requirements, and preserve business files, ownership and audit logs through a controlled transfer.
Check indirect routes such as application tokens, mobile sessions, remote access, payment approver roles and administrator rights, and change shared passwords where the person knew them while moving toward individual accounts where possible. For a role transfer, grant the new minimum access and remove the old rights rather than accumulating both.
Confirm completion with evidence from each system, since a checklist marked done before an integration processes the revocation is weak assurance. Recheck high-risk accounts after the effective time and investigate any later login, and communicate the change to relevant staff without disclosing unnecessary employment details.
For owners, this process protects customer information and money while ensuring the team can still do legitimate work after a colleague leaves. Keep an exception path for a permission that cannot be removed on time, recording the owner, interim control and target date, and do not label the case complete.
An active vendor login after departure remains a real exposure even if the internal account is disabled. Test the process periodically with a sample of role changes as well as departures, because transfers can leave old approvals in place when the worker still needs a login for the new job.
The review should compare effective permissions with the person's current responsibilities. A returned device may hold downloaded data or cached sessions even after a cloud password changes, so inventory the device, decide whether it must be preserved for records, and clear access through the approved process.
Coordinate physical collection separately from account revocation, and log completion and verification of both controls independently.
In practice
Real-world examples.
Example
A departing finance employee's bank approval access is removed at the agreed time and a replacement approver is assigned. Finance confirms with the bank portal's own log that the old approver can no longer release payments. Pending payments are reviewed so none waits for a person who has left.
Example
An employee moves from sales to operations; old CRM export rights are removed while the new job's access is granted. The manager signs off the new permission list, and IT compares it with the previous list. Any right that does not match the new role is questioned.
Example
A contractor's building badge is disabled, but the team also checks a retained vendor portal account and shared password. The portal login is closed and the password is changed. The check log records who closed each item and when.
Formula
Calculation
Timely access removal rate = In-scope permissions revoked by the approved effective deadline / In-scope permissions identified for removal x 100
Worked example. A fictional offboarding case identifies 25 permissions. Twenty-three are revoked by the deadline; two vendor accounts remain open for follow-up.
- Timely removal rate = 23 / 25 x 100 = 92%.
- Those two accounts remain a live control gap, even if the main corporate login is closed.
A system list should be checked against actual access paths, not assumed complete. If the two open vendor accounts are found and closed three days after the deadline, the case can be recorded as complete, but the timely rate for that case stays at 92% because the measure counts removals made by the deadline.Case study
Seen in the real world.
This illustrative and entirely fictional example follows Northvale Trading, an invented wholesaler. It removed a former operations manager's main account but forgot a supplier ordering portal and a warehouse badge. The person did not misuse them, yet the company could not demonstrate that access had ended. Northvale mapped permissions by role and connected HR changes to IT, procurement and facilities actions.
Each team now records the actual revocation result and time. Shared credentials were replaced with named accounts where supported. A later role transfer used the same process, preventing old rights from quietly accumulating. The next audit samples a recent transfer and finds an old payment-approval role still active.
Northvale removes it and updates the transfer checklist to require finance confirmation. The case shows why offboarding is about permissions, not merely whether an account exists. The auditor records the correction date and checks for transactions in the gap.
Watch out
Common mistakes.
- Treating the main email login as the only access a worker holds.
- Marking revocation complete before a third-party system confirms it.
- Deleting business records or disabling needed handover without a retention plan.
Questions
People also ask.
When should access end?
Use the authorised employment or contract transition time and risk policy, with local legal requirements in mind.
Are shared passwords enough to change?
Change them if known to the departing person, and prefer named access where practical.
How do you verify removal?
Review system status, tokens, physical access and any post-departure activity for higher-risk roles.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%