Decommission administrative and privileged access
When a person leaves the organization, changes responsibilities, or no longer requires access:
Identify integrations, credentials, and responsibilities owned by the user.
Transfer required responsibilities to an authorized user.
Disable sign-in when access must end immediately.
Revoke API keys and client authentication certificates.
Remove unnecessary Account Manager and product roles.
Disable or delete the standard user or service user according to your agency’s policy.
Review the platform audit logs to confirm the changes.
Before deleting a user with Account admin, User manager roles, or a custom role containing Manage accounts, or Manage users permission, verify that another authorized administrator can perform the required account-management tasks.