Page Comparison

YTracker Tracker to ensure we fully off-board all technical staff leaving the teamTIS, please add columns for individuals as required.

Ops: Remove developer from Github Organisation.
Andy Nash, Simon Meredith, Andy Dingley, Liban Hirey and John Simmons have Owner privileges.

Y

N/A

Y

Step

Emanuele

Steve

JohnG

Reuben

Luis

Jag

Sunil

Fred

Roope

Panos

Tuomas

Chris

Ray

Joanne

Rana

Ola

Bertrand

David

Pete

Abrar

Omar

Femi

Paul

Sachin

Phil

Y

Ops / Lead devs - Remove from:

SMs / Lead devs - Remove from:

Line Manager

Person

Github organisation

Github Service User MFA

Dependabot

MongoDB Atlas

TSS

Atlassian

Slack

Metabase

Trello

Google Analytics

O365

¹¹
ID passes

Stan

Y

N/A

?

Y

?

Y

N/A

John S

Y

N/A

Y

N/A

Y

?

Ops: Add the user to the inactive_accounts list in Ansible vars/hee-access.yml, commit and push the changes.

Y

Andy

Y

N/A

Y

N/A

Y

N/A

Y

Ops: Run the Ansible SSH access so the user is removed from the authorized_keys on the servers.

N/A	Y	?
Alistair

?

Y

?

Y

?

N/A

Y

N/A

Y

N/A

?

N/A

Y

N/A

Y

N/A

Y

?

Y

Liban

Y

?Y

N/A

Y

?

Y

N/A

?

N/A

?

Ops: Remove from Keycloak on Dev, Stage and Prod.

Y

N/A

Y	Y	Y	Y	?
Marcello	Y

Y

N/A

Y

?

N/A

?

N/A

?

Y

(stage & Prod)

Y

(stage & prod)

?

Ops: Remove from Sentry

N/A

Y	Requested
Shivani	Y	N/A

N/A

Y

N/A

Y

?

N/A

N/AN/A

Y

N/A

Y

?Y

Y

?

Ops: Remove the user from the Auth DB in Prod, Stage, Dev and UIDev

?

Y	Requested w/ Laptop
Seb	N/A	N/A	?	?

?

Y

N/A

Y

?

N/A

?

N/A

?

Y

?

Y

?

Simon

N/A

Y

N/A

?

Y

??

Y

?

Ops: Remove from Azure subscriptions, email Stephen Loughran (see Contacts page).

?

Y

?

N/A

Y

N/A

?

N/A

?

Y

?

Y

?

Y

?

Y

?

Y

?

Y

?

Ops: Change Password for SmokeTestUser in production

Phil W

N/A

?

N/A

?

N/A

Y

N/A

Y

N/A

Y

?

Ify O-O

N/A

Y

?

N/A

?

N/A

?

Y

?

Y

?

Y

?

Y

?

Y

?

Y

?

Requested

?

Ops: Remove person from Monitoring tools (Prometheus/Grafana)

Babul R

Y

N/A

Y

N/A

Y

N/A

Y

N/A

Y

Requested

Uzair B

Y

N/A

Y

N/A

Y

N/A

Y

N/A

Y

Requested

Paul H

Y

N/A

Y

?

Y

N/A

Y

N/A

?

Y

?

Y

?

Y

?

Y

?

Y

?Ops: Remove permissions from Dependabot

Y

?

Phil J

Y

N/A

Y

?

Y

N/A

Y

N/A

Y

?

Sachin M

Y

N/A

Y

?

Y

N/A

Y

N/A

Y

?

Femi O

Y

N/A

Y

N/A

Y

N/A

Y

N/A

?

Y

?

Y

?

Y

?

Y

?

Y

?

Y

?

SM: Deactivate the user in Atlassian user management (removes access to both JIRA and Confluence)
Hamburger | Site administration | Type name | Click deactivate.

Omar M

Y

N/A

Y

?

N/A

Y

N/A

Y

N/A

Y

?

Abrar K

Y

N/A

Y

N/A

Y

N/A

Y

YY

N/A

Y

?

Pete C

Y

N/A

Y

N/A

Y

N/A

Y

N/A

Y

?

David H

Y

N/A

Y

YY

?

Y

N/A

Y

SM: Adjust the Slack groups accordingly - this should happen automatically on turning ex-staff into single channel guests

N/A	N/A	Y	Y	Y	Y	Y	Y	Y
Ola O	Y	N/A	Y	Y	?

YY

N/A

Y

N/A

Y

SM: Remove from MetabaseY

Rana N

Y

N/A

Y

N/A

Y

N/A

Y

YY

Joanne W

Y

SM: Remove from calendars in TIS.Team, and remove from email groups

Y

N/A

?

N/A

Y

N/A

Y

Ray H

Y

N/A

Y

?

Y

N/A

YY

?

Y

SM: Deactivate user's O365 account, by raising service desk support ticket with IT

Y

N/A

Y

Anchor

...

	Notes

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

	Notes

Add to inactive accounts list in Ansible vars/hee-access.yml, commit and push the changes
Run the Ansible SSH access so they are removed from the authorized_keys on the servers
Remove on Stage and Prod
Linked to GitHub account. When removed from the group on GitHub, their access to Sentry is removed (although they still appear as having had access to Sentry)
Email Stephen Loughran (see Contacts page)
Change password in Prod
Cognito user pool
Deactivate the user in Atlassian user management (removes access to both JIRA and Confluence)
Hamburger | Site administration | Type name | Click deactivate.
Convert the user in Slack to a single channel ("#ex-pats") guest
Click HEE_TIS | Manage members | Type name | Click arrow next to "Member" | Click "Convert to guest" | Select single channel | Choose "#ex-pats"
Spot check the Slack groups have been adjusted accordingly - this happens automatically on turning ex-staff into single channel guests
Raise a leavers form in HEE Connect
Arrange for return of temporary ID passes (for London, Sarah Harding (Facilities) informs me that photoID passes simply need to be disposed of, as they get cancelled by UOL

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

Y

...

?

...

?

...

?

...

?

...

?

...

?

...

, non-photoID passes need to be returned as they are reused.
For Manchester, the photo element of the ID is stuck onto reusable passes, so all Manc-based leavers need to return their ID passes)

Completely off-boarded: Tamer, Fayaz, Russell, Alex, Graham, Andras, Suneet, Hammed, Alistair Grom , Matt Leachand Matt Leach

Assumed to be completely off-boarded (subject to confirmation on Auth DB, and Azure, above): Emanuele, Steve, JohnG, ReubenN, Jag, Sunil, Fred, Roope, Panos, Tuomas, Chris and Bertrand

? - Requires input
R - Requested
N/A - No account created to start with

Version	Old Version 103	New Version Current
Changes made by	Andy Nash	Joseph (Pepe) Kelly
Saved on	09 Nov 2020	04 Nov 2024

Page Comparison

Versions Compared

Key