Someone leaves the organisation, and every key and card has to come back. The Access Manager sets the end date, the Credential Manager takes everything back at the desk, and the Organisation Admin settles the login and the places the person answered for. It all starts on the person's page under People.
The Access Manager enters the end date on the Information tab, or the HR file's morning import sets it from the leaving date where your organisation sends one (Change, link a login to, or delete a person, Connect your HR system through a daily file).
The Access Manager reads on the person's page which keys, cards and groups they have, and with an HR file the run in the Sync Log lists the same for every leaver (Find a person and read their page, Review, apply or undo an HR file run).
If the person has a login, the Organisation Admin links it to their person record beforehand, so portierX pauses it once the day of the end date is over, or Microsoft Entra ID deactivates it where your organisation provisions users from there (Change, link a login to, or delete a person, Provision people from Microsoft Entra ID).
If the Responsibilities tab lists places, or the person is named Approver, Reviewer or owner, the Organisation Admin names someone else (Name who is responsible for a place, Name approvers, owners and reviewers).
On the last day the Credential Manager takes every key and card back on the person's page, and a connected access control system hears of each return at once (Take a key or card back).
If a key or card does not come back, the Credential Manager reports it lost or stolen (Report a lost, stolen or damaged key or card).
The Access Manager takes the person out of their people groups, and the keys a group gave go on the return list while their cards lose the group's doors (Organise people into groups).
After the end date the person is listed under People on the Returns tab with everything they still hold, because the end date alone blocks nothing and takes nothing back (Work through hand-overs and returns, Return dates, reminders and overdue keys).
The Information tab shows the end date.
Assigned Access Credentials lists no key and no card.
The person is not on the Returns tab.
On the page of every key they held, the person is listed under Held before with Returned, Reported lost or Reported stolen.
The Groups tab on their page lists no group.
Where a login was linked, the Login line reads Paused.