Leavers Guide
Revoking Access
Digital Services
The central Digital Services team will be able to remove and revoke access from a number of different accounts outside of the technical team.
Contact the Service Desk (or slack channel #digitalservicedesk). They will go through their own leaver’s process, as documented here:.
Note - it is worth reminding the service desk to transfer the leaver’s Google Drive to someone in their team
Note - for leavers from the cloud-platforms team - ask the service desk to transfer any slack webhook integrations to someone in the team.
IT IS MOST IMPORTANT THAT YOU REQUEST THIS BEFORE THE PERSON LEAVES.
This is because if the person has created a slack-webhook for alerting purposes, the loss of that slack-webhook can cause problems - when their profile is deleted (as the webhook link is referenced in cloud-platform-infrastructure/blob/main/terraform/cloud-platform-components/terraform.tfvars.
AWS Accounts
1/Â Purge them from AWS accounts (as at 04/05/2020 the following):
- moj-cp
- mojdsd
Use the link above to login to the moj-cp account. For the others, you will need to login via the AWS console
2/ Remove them from cloud-platform-terraform-awsaccounts-iam
- As per this PR
3/ Remove them from cloud-platform-eks
- As per this File
4/ Request LastPass removal
5/ Request vpn removal
6 / Remove their access to:
Email the administrator of our password management provider to remove the leaver’s login access contact details here
Email the VPN provider requesting removal of their VPN access contact details here
6/ Remove them from the support rota (if applicable). Pagerduty
7/ Remove them from platforms@digital.justice.gov.uk google group (if applicable). Link here Â
Reference platforms@digital.justice.gov.uk