Contents6
A new employee’s arrival is prepared with care. Their departure, much less so. On the last day, they hand back their laptop, everyone wishes them well, and their accounts stay open: email, the CRM, the invoicing tool, the company’s social media account, access to a customer’s shared folder. Nobody has the full list, because the tools were added one at a time, by different people.
A forgotten account is not just a subscription line paid for nothing. It is access to company data that should no longer exist. This article is part of the n8n workflows: what each department can automate series, human resources section.
In short
A single exit checklist, the same for everyone, kept up to date when a tool is added.
The workflow starts as soon as the leaving date is known, not on the last day.
Access is removed at the planned time, with a record of each removal.
Files and shared inboxes are handed over before access is removed.
The exit interview and the handover stay human.
Why access stays open
The cause is almost always the same: there is no inventory of access per person. IT knows about the email and the workstation. The salesperson created their own account on the prospecting tool. Marketing added an intern to the company page. When someone leaves, everyone assumes someone else is dealing with it.
The CNIL guide to personal data security treats managing user permissions, including removing them when a user leaves, as a basic measure. The workflow does not fix the lack of an inventory, but it forces you to build it once, then keep it.
How a departure unfolds
- Date known
HR records the departure; the workflow creates the exit checklist and informs the manager.
- Two weeks before
It asks the manager who should take over the files, the customers and the shared inboxes.
- The day before
It reminds everyone about returning equipment and prepares the end of contract documents.
- The last day, at the planned time
It suspends the accounts, redirects email and removes shared access.
- A month later
It deletes or archives the suspended accounts, according to the company’s rule.
Suspending before deleting is a useful precaution. For a few weeks, you can still recover a forgotten document or read a late customer email, without the former employee having access to anything.
What the workflow can remove on its own, and the rest
What n8n removes through an API
Email and office suite
CRM, support tool, ERP
Access to shared folders
What remains an assigned task
A tool with no API or connector
A social media account
Equipment and building access cards
Not every tool offers a way to remove access by program. For those, the workflow creates a dated task for the right person, and only marks the step as done once it is confirmed. The exit checklist stays complete even when the automation cannot do everything. For tools without an API, the article Automating software without an API describes the other ways in.
Shared passwords are a special case: an employee who leaves knows shared credentials. A team password manager tells you which ones they have seen, and therefore which ones to change.
The record, for yourself and for an audit
Each step that runs leaves a line: what, when, by whom or by which workflow. The n8n documentation describes the execution history, which keeps the detail of each run. The day a customer, an auditor or an insurer asks how the company handles departures, the answer is a document, not a promise.
The mirror of arrival
The departure is built as a mirror of the arrival. If the company already has an onboarding workflow, described in Employee onboarding: what to automate for day one, every access created on arrival must have its removal line on departure. It is the best way to keep the inventory up to date: a tool added to one is added to the other.
To build the exit checklist and the workflow that runs it, our n8n automation offer starts with an inventory of your tools, department by department.
Frequently asked questions
Should access be removed as soon as the departure is announced?
Not usually. The employee keeps working during their notice period and needs their tools. The workflow removes access on the last day, at the planned time. In a difficult departure, management can bring this forward: the same workflow then runs immediately, which avoids improvising under pressure and forgetting an account.
What do you do with the inbox of an employee who has left?
You suspend it, redirect new messages to a colleague or set an automatic reply giving the new contact. Old messages are archived according to the company’s rule. The workflow applies these choices the same way for every departure. The question of what to keep, and for how long, is settled with the person responsible for data.
Does the workflow also work for contractors and interns?
Yes, and that is even where it is most useful. Contractors, interns and temporary staff often receive access outside the usual circuit, and people forget to remove it. Giving them an end date when they arrive lets the workflow start the exit process on its own, even if nobody thinks about it on the day.
Sources
- Guide de la sécurité des données personnelles, CNIL (new tab)cnil.fr
- Executions, n8n documentation (new tab)docs.n8n.io
Jim · founder of Brain Plus AI
Also in n8n workflows by department
Practical guide5 min The topic guide
n8n workflows: what each department can automate
Accounting, sales, HR, support, purchasing, marketing, logistics, management: every department has tasks that travel from one tool to another. Here, department by department, are the n8n workflows that save time, and those that are not worth the effort.
Practical guide4 min
Job applications: an n8n workflow from CV to interview
Applications arrive through five channels and get lost in inboxes. An n8n workflow brings them together, replies to every candidate and prepares the screening, without ever deciding for the recruiter.
Practical guide7 min
Passwords: one password manager for the whole team
An "Access" spreadsheet, passwords sent over chat, a shared account nobody dares to change: a team password manager fixes all of it in one go. What it changes when someone joins or leaves, how to choose one, and where to start.