Revoking access for an offboarded employee
An agent left the company today. What is the fastest way to make sure they can no longer sign in?
An agent left the company today. What is the fastest way to make sure they can no longer sign in?
Remove them from Settings → Team, their sessions are invalidated within about a minute of the removal, so any tab they had open gets signed out on the next request.
Remove them from Settings → Team, their sessions are invalidated within about a minute of the removal, so any tab they had open gets signed out on the next request.
Worth also rotating any API keys they had access to at the same time, removal does not touch keys separately.
Also worth revoking any personal access tokens they may have generated, those are not tied to the session either.
Does removing them also pull their name off answers they already posted?
No, their existing questions and answers stay attributed to them, removal only affects access going forward. Anonymizing the row is a separate action if you want that too.
Also worth checking any Zapier or other third party integrations tied to their account, those can outlive a removal too.
Sign in to reply to this question.