Versions Compared

Version Old Version 99 New Version Current
Changes made by

Andy Nash (Unlicensed)

Joseph (Pepe) Kelly

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

YTracker Tracker to ensure we fully off-board all technical staff leaving the teamTIS, please add columns for individuals as required.

Step

Emanuele

Steve

JohnG

Reuben

Luis

Jag

Sunil

Fred

Roope

Panos

Tuomas

Chris

Ray

Joanne

Rana

Ola

Bertrand

David

Pete

Abrar

Babul

Omar

Femi

Ops: Remove developer from Github Organisation.
Andy Nash, Simon Meredith, Andy Dingley, Liban Hirey and John Simmons have Owner privileges.

Y

N/A

Ops / Lead devs - Remove from:

SMs / Lead devs - Remove from:

Line Manager

Person


Github organisation

Github Service User MFA


Ansible


authorized_keys


Keycloak


Sentry


Auth DB


Azure subscriptions


Smoke
Test User


Dependabot


AWS


MongoDB Atlas

TSS


Atlassian


Slack


Metabase


Trello


Google Analytics


O365

11
ID passes

Stan

Y

N/A

N/A

N/A

?

Y

Y

Y

Y

Y

Y

Y

N/A

N/A

John S

Y

N/A

Y

Y

Y

N/A

Y

?

?

Y

Y

Y

Y

Y

Andy

Y

N/A

N/A

N/A

Y

N/A

N/A

N/A

N/A

N/A

N/A

N/A

Y

Y

Y

Y

N/A

Y

?

Alistair

N/A

N/A

N/A

N/A

Y

N/A

Y

Ops: Add the user to the inactive_accounts list in Ansible vars/hee-access.yml, commit and push the changes.

Y

N/A

?

N/A

Y

N/A

N/A

Y

Y

Y

Y

Y

Y

?

Liban

Y

N/A

Y

Y

Y

Y

Y

?

?

N/A

?

N/A

?

Y

Y

Y

Y

Y

Y

?

?Y

Marcello

Y

N/A

Y

Y

Y

Ops: Run the Ansible SSH access so the user is removed from the authorized_keys on the servers.

Ops: Remove from Keycloak on Dev, Stage and Prod.

Y

Y

Y

?

?

N/A

?

N/A

Y

Y

Y

Y

Y

N/A

Y

Requested

Shivani

Y

N/A

Y

Y

Y

N/A

Y

?

?

N/A

Y

N/A

Y

Y

Y

Y

Y

Y

Y

Requested w/ Laptop

Seb

N/A

N/A

?

?

Y

N/A

Y

?

Y

?

N/A

?

N/A

?

Y

Y

Y

Y

Y

Y

?

Simon

Y

N/A

Y

Y

Y

Y

Y

?

?

N/A

N/A

?

Y

N/A

?

N/A

Y

Y

?

Y

Y

(stage & Prod)Ops: Remove from Sentry

Y

Y

(stage & prod)Y

?

Phil W

N/A

N/A

N/A

N/A

N/A

?

N/A

?

N/A

N/A

Y

N/A

N/A

Y

Y

N/A

Y

Y

Y

?

Ify O-O

N/A

N/A

N/A

N/A

Y

?

N/A

?

N/A

N/A

N/A

N/A

N/A

Y

Y

Y

Y

Ops: Remove the user from the Auth DB in Prod, Stage, Dev and UIDev

Y

Y

Requested

Babul R

Y

N/A

Y

Y

Y

Y

Y

Y

N/A

N/A

Y

N/A

N/A

?

Y

?

Y

?

N/A

?

Y

?

Y

?

Y

?

Requested

?

Uzair B

?

Y

?

N/A

?

Y

??

Y

Y

Y

Y

Y

?

?

N/A

N/A

Y

N/A

N/A

Ops: Remove from Azure subscriptions, email Stephen Loughran (see Contacts page).

?

?

?

?

?

?

?

Y

Y

N/A

Y

Y

Y

Requested

Paul H

Y

N/A

?

Y

Y

Y

?

?

Y

?

Y

N/A

?

N/A

?

Y

?

?

?

?

?

SM: Deactivate the user in Atlassian user management (removes access to both JIRA and Confluence)
Hamburger | Site administration | Type name | Click deactivate.

Y

Y

N/A

N/A

Y

Y

Y

Y

Y

Y

?

Phil J

Y

N/A

Y

Y

Y

?

Y

Y

N/A

N/A

Y

N/A

N/A

Y

Y

Y

Y

Y

Y

?

Sachin M

Y

N/A

Y

Y

Y

?

Y

Y

N/A

N/A

Y

SM: Convert the user in Slack to a Single Channel ("#Ex-pats") guest
Click HEE_TIS | Manage members | Type name | Click arrow next to "Member" | Click "Convert to guest" | Select Single channel | Choose "#Ex-pats"

N/A

N/A

Y

Y

Y

Y

Y

Y

?

Femi O

Y

N/A

Y

Y

Y

Y

N/A

Y

N/A

N/A

Y

N/A

N/A

Y

Y

Y

Y

Y

Y

?

Y

Omar M

Y

SM: Remove from MetabaseY

N/A

Y

Y

Y

?

N/A

Y

N/A

N/A

Y

N/A

N/A

Y

Y

Y

Y

Y

Y

?

Abrar K

Y

N/A

Y

Y

Y

Y

N/A

Y

Y

N/A

N/A

Y

Y

SM: Remove from calendars in TIS.Team, and remove from email groups

N/A

N/A

Y

Y

Y

Y

Y

Y

?

Pete C

Y

N/A

Y

Y

Y

Y

N/A

Y

N/A

N/A

Y

N/A

N/A

Y

Y

Y

Y

Y

Y

Y

?

David H

Y

SM: Deactivate user's O365 account, by raising service desk support ticket with IT

N/A

Y

Y

?

Y

Y

Y

N/A

N/A

Y

N/A

N/A

Y

Y

Y

Y

Y

Y

Y

Ola O

Y

N/A

Y

Y

?

N/A

Y

Y

Arrange for return of ID passes

N/A

N/A

N/A

N/A

N/A

Y

Y

Y

Y

Y

Y

Y

Rana N

Y

N/A

Y

Y

N/A

N/A

Y

Y

N/A

N/A

N/A

N/A

N/A

Y

Y

Y

Y

Y

Y

Remove from AWS

Y

Joanne W

Y

N/A

N/A

N/A

?

N/A

N/A

Y

N/A

N/A

N/A

N/A

N/A

Y

Y

Y

Y

Y

Y

Y

Ray H

Y

N/A

Y

Y

?

N/A

?

Y

N/A

N/A

N/A

N/A

N/A

Y

Y

Y

Y

Y

Y

Y

Change Password for SmokeTestUser in production

Remove person from Monitoring tools (Prometheus/Grafana)

Remove permissions from Dependabot

Anchor
Notes
Notes

  1. Add to inactive accounts list in Ansible vars/hee-access.yml, commit and push the changes

  2. Run the Ansible SSH access so they are removed from the authorized_keys on the servers

  3. Remove on Stage and Prod

  4. Linked to GitHub account. When removed from the group on GitHub, their access to Sentry is removed (although they still appear as having had access to Sentry)

  5. Email Stephen Loughran (see Contacts page)

  6. Change password in Prod

  7. Cognito user pool

  8. Deactivate the user in Atlassian user management (removes access to both JIRA and Confluence)
    Hamburger | Site administration | Type name | Click deactivate.

  9. Convert the user in Slack to a single channel ("#ex-pats") guest
    Click HEE_TIS | Manage members | Type name | Click arrow next to "Member" | Click "Convert to guest" | Select single channel | Choose "#ex-pats"
    Spot check the Slack groups have been adjusted accordingly - this happens automatically on turning ex-staff into single channel guests

  10. Raise a leavers form in HEE Connect

  11. Arrange for return of temporary ID passes (for London, Sarah Harding (Facilities) informs me that photoID passes simply need to be disposed of, as they get cancelled by UOL, non-photoID passes need to be returned as they are reused.
    For Manchester, the photo element of the ID is stuck onto reusable passes, so all Manc-based leavers need to return their ID passes)

Completely off-boarded: Tamer, Fayaz, Russell, Alex, Graham, Andras, Suneet, Hammed, Alistair Grom , Matt Leachand Matt Leach

Assumed to be completely off-boarded (subject to confirmation on Auth DB, and Azure, above): Emanuele, Steve, JohnG, ReubenN, Jag, Sunil, Fred, Roope, Panos, Tuomas, Chris and Bertrand

? - Requires input
R - Requested
N/A - No account created to start with