An employee departure can happen on friendly terms and still create a security gap. The former employee may have an active Microsoft 365 session, a company phone, vendor access, and shared passwords no one remembered to inventory.
Offboarding is a recurring category in Blue Tree Technology® support records. The underlying requests vary, which is precisely why a consistent HR-to-IT handoff matters. The ticket is the beginning of the process, not proof that every access path has been reviewed.
Before the last workday: decide who owns the decision
HR or a designated manager should give IT an authorized effective date and time, explain what devices the employee used, identify a business owner for shared files, and flag any retention or legal requirements. Do not rely on an informal chat message or assume the IT team knows the personnel decision.
At the approved separation time: close the access paths
- Block or disable appropriate accounts and revoke active sign-in sessions according to your identity setup.
- Review Microsoft 365, VPN, line-of-business software, cloud storage, password vaults, and third-party vendor portals.
- Retrieve managed devices and access cards; follow the organization’s mobile-device policies for business data.
- Rotate shared credentials or secrets the departing employee could still use, where applicable.
- Remove privileged roles and delegated access; verify ownership of shared automation and service workflows.
Preserve business continuity without bypassing privacy rules
The business may need access to client correspondence, documents, scheduled meetings, or work in progress. Determine who is authorized to receive that access and whether retention, litigation hold, industry requirements, or company policy apply. Do not rush to delete a mailbox or user account before preservation questions are answered.
In Microsoft 365, blocking sign-in and retaining data are separate tasks. The right sequence depends on how the tenant and retention settings are configured.
Close the loop with a sign-off
Give the requesting manager a clear completion report: what was disabled, what remains pending, what data was transferred, and which exceptions still need owners. A documented exception is safer than a silent assumption.
Common questions
Should IT always delete the account immediately?
No. Preventing access and preserving business records are different goals. Confirm retention and legal needs before deletion.
Who should request an offboarding change?
A designated, authorized manager or HR contact should initiate it through an approved channel and identify the effective time.
Plan the next step
Need a repeatable joiner-mover-leaver process? Blue Tree Technology® can review your employee onboarding and offboarding workflow.