Disabled is one action.
Proved is every boundary.
Scope a leaver event beyond the primary identity. Keep SaaS, shared access, automation ownership, devices, physical credentials and business data visible until an authorized source-system action and independent review provide evidence.
Leaver scope and open-item checker
| Scope group | Entered status | What proves it |
|---|
Review boundary
A completed Entra/SSO workflow does not prove every direct SaaS account, shared link, service owner, device or physical credential is resolved. Attach source-system evidence outside this browser draft.
Offboarding boundary: this tool never disables/deletes an account, removes access, wipes/locks a device, rotates a secret, changes forwarding, or approves data disposition. Use aliases and non-secret references only; authorized HR, IT/MSP, legal and business owners perform and review real actions.
$15 Per-Leaver Evidence Pack
Export a cross-system matrix with source record, action time, executor, independent reviewer, exception owner, device/physical return and final signoff fields. Entered browser status remains a claim until evidence is attached.
- Eight cross-system completion groups
- Source event/ticket, executor and reviewer fields
- Shared access, service ownership and device return checks
- Exception queue and final HR/IT/business signoff
Current official leaver controls and visible substitutes
PMF prior 86/100 · 120 days + 150 qualified visits + professional evidence review