IT - Employee Offboarding

Offboards company employees to maintain organizational security and prevent abuse of company resources. It streamlines the process of returning company property, delegates resources to the employee's manager, retains important data that is in possession of the employee, and deletes the user and user information if chosen to do so.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • Employee Offboarding - Revoke Permissions
  • Employee Offboarding - Delegate
  • Employee Offboarding - Gather User Information
  • Wait Until Datetime
  • Employee Offboarding - Retain & Delete

Integrations

  • Builtin

Scripts

This playbook does not use any scripts.

Commands

  • closeInvestigation

Playbook Inputs


NameDescriptionDefault ValueSourceRequired
UserManagerEmailThe email of the manager of the user you are offboarding.employeemanageremailincidentOptional
OffboardingUserEmailThe email address of the user that you are offboarding.employeeemailincidentRequired
AutoreplyMessageThe automatic message that is sent as reply from the user you are offboarding once they lose access to their email account.This employee is no longer with our company.-Optional
WipeAccountFromMobileWhether the Google account of the user should be removed from the mobile device of the user.False-Optional
LogisticsEmailThe email address of the logistics department who has the data about which company property the user has.--Optional
DuoUsernameThe username, in Duo, of the user you are offboarding.--Optional
CompanyPropertyReceiverEmailThe email of the department responsible for receiving returned company property from the user you are offboarding. In some organizations, this may be the same as the LogisticsEmail playbook input.--Optional
OldEmployeeGroupNameThe name of the group in Active Directory that contains old employee user accounts. If a group name is specified, the user will be added to that group instead of getting deleted at the end of the offboarding process.Old Employees-Optional
ServiceNowAssetsTableNameThe name of the "Assets" table in ServiceNow. This will be used to get the assets that belong to the user you are offboarding.alm_asset-Optional
PerformPotentiallyHarmfulActionsWhether to perform potentially harmful actions, such as revoking user permissions and deleting the user. Taking the actions is necessary for a more complete offboarding process, and if set to False - the actions will have to be taken manually.False-Required

Playbook Outputs


There are no outputs for this playbook.

Playbook Image


IT_Employee_Offboarding