Skip to main content

Employee Departure

The Context​

Nadia is the HR Director at FinSecure, a financial consulting firm. A senior consultant, Marc, is leaving the company on Friday. Marc had access to dozens of applications containing sensitive financial data of clients. Nadia must ensure that all his accesses are cut off on the same day, without forgetting a single one.

The Problem Without VaultysHub​

  • No one knows exactly which applications Marc had access to
  • Accounts must be disabled one by one on each application
  • Some shared applications require a password change
  • The process takes days, even weeks
  • There are often forgotten active accounts for months

Risk: A former employee can access client data long after their departure.

With VaultysHub​

Step 1 — View All of Marc's Access (1 minute)​

Nadia opens Marc's profile in VaultysHub. She instantly sees all the folders he belongs to and all the applications he has access to.

Step 2 — Revoke All Access (1 click)​

Nadia disables Marc's account. In an instant:

  • Marc is removed from all folders
  • All applications are removed from his dashboard
  • The browser extension no longer fills in any credentials
  • Active sessions are invalidated

Step 3 — Verify (1 minute)​

The dashboard confirms that Marc no longer has access to any applications. Since Marc never knew the passwords (thanks to the company vault), no password change is necessary.

Step 4 — Prove the Revocation via Logging​

Nadia opens the Logging (Audit Trail) from Marc's profile. The log lists each event chronologically: last logins, folder removals, account deactivation. Each line is timestamped and indicates the application, device, and type of event.

If the legal department or an auditor requests proof, Nadia generates the monthly RSSI report from the Reports menu — Marc's de-provisioning is automatically included in the "Access Management and Provisioning" section.

What It Changes​

Without VaultysHubWith VaultysHub
Days to cut everythingInstant revocation in 1 click
Forgotten active accountsAutomatic comprehensive inventory
Password change necessaryNo password to change
No proof of revocationTimestamped logging + compliance reports

Features Used​

  • Admin Dashboard — Overview of users and their access
  • Member Management — Removing a user from all folders
  • Company Vault — Passwords never revealed to users
  • Logging — Timestamped proof of each access revocation
  • Reports — RSSI report including provisioning/de-provisioning
  • Logging — Timestamped proof of each access revocation
  • Reports — RSSI report including provisioning/de-provisioning