Have you ever had a staff member leave your company and you don’t know where to begin? You know you need to protect the important data within your database, among many other things, but where do you start?
Here are some things you can do immediately in Jackrabbit to make sure information does not get in to the wrong hands!
If the Staff Member has a User ID
- Immediately remove access to the database. See our Help article Revoke a User ID for step-by-step instructions.
- Edit the email address for the User ID to help prevent them from resetting their password; the email address is a required field so you are not able to just delete it.
Consider updating it to something like "email@example.com" or "firstname.lastname@example.org" to be able to see, at a glance, the reason the User ID's access has been revoked. In this configuration, Jackrabbit allows it to be saved to the User ID record as an email address. See Update a Jackrabbit User's Email Address.
- Add brief notes on the User ID page. This can be seen by Jackrabbit Support in case this person tries to gain access to your database.
Do not delete the User ID. You may need to audit the user’s activity at some point.
If you would like to log in as the User who is no longer with you, to see what they were able to see and do in your database, you can do so by changing the password on their User ID record. See Jackrabbit User ID Passwords for instructions on how to reset a password from within the database.
If the Staff Member has a Staff Record
- Set the status of the staff member to inactive (Staff record > Summary tab).
- Add an end date for pay rates (Staff record > Compensation tab).
- Clear out their Staff Portal Login ID (Staff record > Portal Settings tab).
Do not delete the Staff record. This cannot be restored by Support. Development can restore the record for a fee.
Make sure to save all changes as you make adjustments to the Staff record.
Completing the steps outlined above will make sure that any staff member, who is no longer a part of your organization, can no longer access your information.
If the staff member is listed as an owner of your database, please contact our Billing department to have their name removed.