Onboarding and Offboarding

Standardize secure user lifecycle operations

Overview

A reliable lifecycle process reduces access drift, improves security, and makes audits easier.

Onboarding Checklist

1. Validate requester identity and team ownership.
2. Assign the lowest role that supports required tasks.
3. Grant project-specific access first, global access second.
4. Record reason for privileged scopes.
5. Verify first login and expected dashboard visibility.

Offboarding Checklist

1. Deactivate account immediately at departure.
2. Remove project memberships and elevated scopes.
3. Rotate shared credentials if operationally required.
4. Verify deprovisioned user can no longer authenticate.

Common Mistakes to Avoid

• Granting manage when view is sufficient.
• Keeping stale invited accounts indefinitely.
• Allowing multiple unmanaged super-admin accounts.