Manage Users › How to Remove a User › Review User Removal Policies for Your Site

Review User Removal Policies for Your Site

Before you suspend a user, review your site policies for user removal.

Improper removal of a user can result in legal or security issues. We recommend that you suspend a user and later optionally delete the user. This recommendation offers the following benefits:

• Helps ensure security continuity
• Enables easier restoration if user definition changes are incorrectly made, or if a user is inappropriately deleted

Note: We assume that your site user removal policy includes the recommendations of auditors and applicable government and industry requirements.

Examples

• Your company terminates an employee due to misconduct. Because your company may need the security definitions and entitlements of this employee for legal purposes, preserve this information by suspending, not deleting, the user.
• A new employee joins your company. You inadvertently assign this employee a user ID that was previously used by a former employee, and then deleted. After several weeks, you are unsure which of these two employees created some of its logging records. Confusion now exists for other forensic records, access entitlement verification, reuse of entitlements and other controls, and possibly other areas that you have not yet identified.