What is deprovisioning?
Deprovisioning is the process of removing an employee's access rights to software and IT resources. It is generally carried out when an employee's status changes, particularly when an employee leaves, changes position, or is promoted. This is an important step in the offboarding procedure, which must always be carried out to ensure the security of the company's IT systems.
It is important to remember that access rights must be removed or suspended as soon as an employee no longer needs them, even if it is a change of position. If deprovisioning is done poorly, this can create security vulnerabilities and allow former employees to still have their access. In extreme cases, you are exposed to the risk of data theft, sabotage of systems or other malicious acts.
Just like provisioning, deprovisioning can be done manually, but this can have several drawbacks and cause errors.
Besoin d'échanger sur vos processus ?
15 minutes pour voir si on peut vous simplifier la vie côté accès. Sans pression, sans engagement.
Besoin d'automatisez vos accès sans chantier IT ?
En 60 minutes découvrez comment Youzer fiabilise vos onboarding et offboarding pour gagner plusieurs heures par semaine côté IT.
Why should it be automated?
Manual deprovisioning can be tedious and prone to errors.
By performing deprovisioning manually, you expose yourself to the following risks:
- Delays: it can take a long time to collect HR data and IS information. Because of this delay, employees who have left may still have their accesses.
- Negligence: It is possible to simply forget to take care of it, which can lead to security breaches and the creation of ghost accounts.
- Errors: Manual unprovisioning can lead to errors, such as deleting active user accounts or failing to delete accounts of departed users. These errors can lead to service interruptions and data loss.
To avoid this type of error, an IAM tool can automate the deprovisioning process.
Thanks to an IAM tool like Youzer, you will be able to have an automated and secure deprovisioning process. People who no longer have a connection with the company will be highlighted and their access will be suspended.
Automation will allow you to:
- Increase productivity: by cross-referencing HR data with IT department information, you have a global view of current and former users, as well as the accounts associated with them. This represents a real time saving for IT teams when creating user accounts.
- Reduce costs: detecting erroneous accounts will allow you to avoid paying for excess licenses for people who are no longer with the company. You can suspend access and then provide it to new employees.
- Secure your IS by quickly and efficiently removing access for users who are no longer present. This reduces the risk of cyberattacks and data theft.
Conclusion
Unprovisioning is therefore crucial when revoking an employee's access rights to software and services. It is an essential step in offboarding to guarantee the company's IT security. Errors can occur when it is carried out manually, which is why automating deprovisioning via an IAM solution, such as Youzer, is recommended. This improves productivity, reduces costs and secures the IT system by quickly and efficiently removing access for inactive users.
