This article is for admins of professional plans.
Explore plans and pricing
When an employee leaves your organization, or you remove a member from your professional plan, you and your employee can be prepared. Take action to ensure that all data is transferred and protected.
Important: In most cases, if a member had work-related logins in their account that they didn’t share with full rights before leaving your organization, you can’t access those logins or their account. If the member hasn't left yet, ask them to, share work-related logins with full rights
However, if you removed the member less than 30 days ago, you can re-add the member to your plan and then log in to their account to access work-related logins. To log in to their account, you may need access to their email, device, or to use recovery methods. These articles can help:
I can’t log in to my Arrow account
Admin-assisted recovery
Generate 2FA recovery codes
What plan members should do before they’re removed
Before the employee leaves your organization
We recommend taking the following actions before an employee leaves your organization and before you remove them from your professional plan:
Ask the employee to share all work-related logins
Important: In most cases, if a member has work-related logins in their account that they didn’t share with full rights before leaving your organization, you can’t access those logins or their account. If the member hasn't left yet, ask them to, share work-related logins with full rights
However, if you removed the member less than 30 days ago, you can re-add the member to your plan and then log in to their account to access work-related logins. To log in to their account, you may need access to their email or device, or to use recovery methods. These articles can help:
I can’t log in to my Arrow account
Admin-assisted recovery
Generate 2FA recovery codes
To make sure that someone at the organization always has access to an employee’s work-related logins after they leave, have the employee share all work-related logins, with full rights, before they leave. We recommend they share work-related logins with a manager, in addition to anyone at the organization responsible for knowledge, tools, and security.
If you’re an admin of a Business or Omnix plan that doesn’t use self-hosted SSO you can view the login list of your plan members. With Login list visibility, you’ll see the plan member’s login names and the date they were created. This way you can check which business logins they need to share with other plan members before you remove them from the plan.
If they have already shared their work-related logins with the right people, ask them to double-check that they’ve shared those logins with full rights instead of limited rights.
Send the employee information to help them prepare
Whether an employee is leaving your organization or you’re removing someone from your plan, you can alert them to take action so no data is lost in the offboarding process.
Send them this article to help them prepare: What plan members should do before they’re removed from a plan
Important: If your plan has Spaces and the employee who is leaving has personal data in their Personal Space, they must take action to keep access to their personal data before they leave your organization or you remove them from the plan. If they log in with single sign-on (SSO), they'll permanently lose access to their account and all personal data as soon as you remove them. If they log in with a Master Password, they could still lose access to their account and personal data if they don’t take steps to prepare
If your plan doesn't have Spaces, plan members shouldn't keep personal data in their account. They'll lose access to all data as soon as you remove them. If you want to allow them to export all data from their account anyway, go to the Admin Console, select Policies, and then turn on Allow Export.
Revoke the employee’s access to work-related logins
If your plan doesn’t have the Spaces feature, all data is removed from the employee’s account when they’re removed from the plan. The only thing you need to do to revoke the employee’s access to work-related logins is to remove them from the plan after they leave the organization
If your plan has the Spaces feature, you can revoke the employee’s access to work-related logins by turning on Revoke access to company items for removed users in your Smart Space Management policies before you remove them. After that, you only need to remove them from the plan when they leave the organization
If the employee was an admin, add another admin
We recommend that you always have more than one admin on your plan.
If the employee was a billing contact, change the billing contact
About removing a member from your Arrow plan
Before your employee leaves your organization, take action to make sure that someone at the organization keeps access to any work-related logins.
After the employee leaves your organization, we recommend that you remove the former employee from your plan to ensure that their access to work-related logins is revoked. You might also want to remove them from the plan to free up the license for a new plan member. You can find a list of your unused licenses in the Users tab.
More about licenses and removals
The removal process is the same for removing a plan admin as it is for removing a member.
After you remove a member, their name will appear grayed out in the Users tab. You can re-add them by selecting the gear icon and then Reactivate.
If they had a pending invitation to join your plan, but never accepted, their name will disappear from the list when you remove them. This will cancel their invitation, but you can reinvite them
Steps to remove a member from your professional plan
- Select the Arrow D icon in your browser’s toolbar and enter your admin Master Password if prompted. In the Arrow Smart Extension pop-up, select More and then Open the Admin Console.
- Select Users.
- To remove one member, select the gear icon in the member's row and select Remove user. To remove multiple members, select the checkbox for each member and then select Remove.
- Confirm in the pop-up.
Common questions
Can I get access to the account or logins of an employee who already left?
In most cases, if a member had work-related logins in their account that they didn’t share with full rights before leaving your organization, you can’t access those logins or their account. If the member hasn't left yet, ask them to, share work-related logins with full rights
However, if you removed the member less than 30 days ago, you can re-add the member to your plan and then log in to their account to access work-related logins. To log in to their account, you may need access to their email or device or use recovery methods. These articles can help:
I can’t log in to my Arrow account
Admin-assisted recovery
Generate 2FA recovery codes
Can I revoke access to work-related logins after an employee already left?
If the employee already left, their access to work-related logins depends on several factors:
- If the member logged in with single sign-on (SSO) and didn’t have the Spaces feature, they permanently lost access to their account after they left so they already lost access to work-related logins. You don’t need to take any action.
- If the member logged in with a Master Password and didn’t have the Spaces feature, make sure to remove them from the plan. After you remove them from the plan, they will lose access to all data they had in their account, including work-related logins.
Remove a member from your Arrow plan - If the member had the Spaces feature and logged in with a Master Password, and you haven’t removed them from the plan yet, you can still revoke their access to work-related logins. Before you remove them, turn on Revoke access to company items for removed users in your Smart Space Management policies. After that, remove them from the plan.
More about Spaces and Smart Space Management
Remove a member from your Arrow plan - If you already removed this type of member from the plan, contact Support for your options
Learn more about what happens to member accounts after they’re removed from a plan
Comments
0 comments
Article is closed for comments.