An important part of security is making sure that ex-employees lose access to accounts and systems as soon as they leave. There are two ways you can offboard someone in Vanta:
If you have an identity provider (ie Gsuite, O365, Okta) or an HRIS (ie Rippling, Gusto, Bamboo) connected to Vanta we are grabbing your employee's lists from there. As soon as Vanta detects a change in status from the connected service, we will prompt you to offboard the user:
The offboarding drawer is used to surface and group together actionable items. Unmonitored accounts that require administrators to verify deactivation can be marked in bulk via the 'Mark all deactivated' button.
The unmonitored accounts section includes all vendors that do not have corresponding credentials connected for. The monitored accounts section includes all vendors for which credentials are connected and we have detected the user having an account.
Admins may also override Vanta and mark monitored accounts as deactivated if they provide a reason. This helps support workflows where Vanta is not able to automatically detect that access has been removed (ex: Admin manually changed password on a google workspace account, but would like to keep the account active).
Manually Added Users
Manually added users follow the same process as marking unmonitored accounts. Approve deactivation of each integration then follow up with complete offboarding.
After offboarding is completed, it may be reset. Resetting offboarding removes any manual acknowledgements of account deactivation, and brings the user back into an offboarding incomplete or offboarding overdue state.
This may be used when an admin unintentionally marked offboarding as complete, or unintentionally marked an account as deactivated. Note that this feature does not remove the end date for the user nor bring them back into our system as active - if an admin would like to reactivate an employee who was marked as terminated in an HR system, they should continue to follow existing workflows to mark the employee is active again.
As always if you require additional assistance please reach out to firstname.lastname@example.org we are here to help!