Offboarding

I'm curious as to what people do when offboarding do they:

  • Disable the account
  • Delete the account
  • Disconnect the account

I'm leaning towards disabling the account and not fully deleting the account until later in time?

Best,

Rich

Comments

  • @Richard Pan - We disable the account. If it is a faculty/admininstrator/staff, we also remove all of their roles.

    Scott

  • @Richard Pan - Disable the account, then remove group and role access. We're SSO, so we also disable their email - but we've learned the hard way to not delete old accounts.

  • Brian Gray
    Brian Gray Community All-Star
    Eighth Anniversary Kudos 5 K-12 Fall 2025 Product Update Briefing Badge Name Dropper

    @Richard Pan - We do a variation of what has already been mentioned:

    For students, I disable the account. Departing students become either Past Student or Alum. Neither role has access to anything. That usually happens on June 20 or so. We disable the school email account (used for SSO) on August 1, so they wouldn't have access after that anyway.

    For employees, I withdraw the employee to change roles to Past whatever. I also disable the accounts. I leave other roles in place. (I used to remove the roles, but I found that it was helpful to have the roles in place for future reference and in case I need to impersonate the user for some reason.)

    We never delete Blackbaud or Google accounts. We want access to the historical information. Also, we have people who return to the school after being away for some time.

  • @Richard Pan For students, we withdraw them but only disable accounts if they left in poor standing. Graduates retain accounts as alumni, hopefully with new updated emails (but we keep student emails active through the summer). For employees, we withdraw them and disable their accounts and, like Brian, we leave all other role information alone for some period of time. If someone is coming in to take their place it's good to have a template to start from to give similar access.