Skip to main content

Employee Offboarding - Revoke Permissions

This Playbook is part of the Employee Offboarding Pack.#

Revokes user permissions as part of the IT - Employee Offboarding playbook.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • Builtin
  • google


This playbook does not use any scripts.


  • googleapps-device-action
  • duoadmin-dissociate-device-from-user
  • gmail-revoke-user-role
  • setIncident
  • gmail-hide-user-in-directory
  • okta-deactivate-user
  • ad-set-new-password
  • gmail-set-password

Playbook Inputs#

NameDescriptionDefault ValueSourceRequired
UserManagerEmailThe email of the manager of the user you are offboarding.employeemanageremailincidentOptional
OffboardingUserEmailThe email address of the user that you are offboarding.employeeemailincidentRequired
WipeAccountFromMobileWhether the Google account of the user should be removed from the mobile device of the user.False-Optional
LogisticsEmailThe email address of the logistics department who has the data about which company property the user has.--Optional
DuoUsernameThe username, in Duo, of the user you are offboarding.--Optional
CompanyPropertyReceiverEmailThe email of the department responsible for receiving returned company property from the user you are offboarding. In some organizations, this may be the same as the LogisticsEmail playbook input.--Optional
OldEmployeeGroupNameThe name of the group in Active Directory that contains old employee user accounts. If a group name is specified, the user will be added to that group instead of getting deleted at the end of the offboarding process.Old Employees-Optional
ServiceNowAssetsTableNameThe name of the "Assets" table in ServiceNow. This will be used to get the assets that belong to the user you are offboarding.alm_asset-Optional
PerformPotentiallyHarmfulActionsWhether to perform potentially harmful actions, such as revoking user permissions and deleting the user. Taking the actions is necessary for a more complete offboarding process, and if set to False - the actions will have to be taken manually.False-Required

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#