Remove administrative and privileged access
When a person leaves the organization, changes responsibilities, or no longer requires access:
Identify CAs, templates, integrations, and credentials owned by the user.
Transfer required responsibilities to an authorized user.
Revoke API credentials and client authentication certificates used for Private CA integrations.
Remove unnecessary Private CA roles in Account Manager.
Disable or delete the user in Account Manager according to your agency's policy.
Review both platform and Private CA audit logs to confirm the changes.
Before removing the last user holding CA admin, CA operations, or a role containing Manage HSM management or Manage escrow master keys, verify that another authorized administrator can perform the required CA-management and key-recovery tasks.