Leavers Guide
When a team member leaves, follow this guide, and log completion in a ticket.
Revoking Access
GSuite and Macbooks
The Service Desk will be able to remove and revoke access from a number of different accounts outside of Cloud Platform.
- Google account closure, ordered in advance of them leaving, by creating a ServiceNow order Return device for Digital Mac & WTP users
This is not just about returning their Mac - it will do the important step of closing their Google account. Note: Include details in the ServiceNow request to transfer the leaver’s Google Drive to someone in their team.
Access to Operations Engineering tools and services
Remove from MoJ Github Organisation, AP Github Organisation and/or ministryofjustice-test Note: Removal from GitHub will also remove access to other services that use this account for single sign-on i.e. AWS SSO, Sentry.io
Remove them from 1Password Note: Removal from 1Password will remove access to shared team credentials for most services
Remove them from Docker
Remove them from Gandi.net
Remove them from OS Data Hub
Remove them from the following Google Groups:
operations-engineering@digital.justice.gov.uk
https://groups.google.com/a/digital.justice.gov.uk/g/operations-engineering?hl=en-GBdomains@digital.justice.gov.uk
https://groups.google.com/a/digital.justice.gov.uk/g/domains?hl=en-GBcertificates@digital.justice.gov.uk
https://groups.google.com/a/digital.justice.gov.uk/g/certificates?hl=en-GBhttps://groups.google.com/a/digital.justice.gov.uk/g/certificate_alerts?hl=en-GB
Remove them from Sentry.io
Remove them from Pingdom
Remove them from PagerDuty
Remove them from Auth0
Line manager actions
- Complete the Leavers Checklist for Managers