How do you remove building access the day someone leaves?
One action should end access at every door, on every site, the moment someone leaves. How to set that up, and what to check in the system you run today.
Revoke the person’s credential once, in one place, and make sure that one action ends access at every door on every site. If leavers also flow in from your directory, the badge is switched off in the same offboarding step that closes their email.
That sounds obvious, yet access often lingers after someone leaves. This guide covers why, what “same day” really needs, and the checks IT, HR and facilities can run this week.
Why building access lingers after someone leaves
- The card does not come back. With plastic cards, offboarding often waits for the card to be returned, and the card keeps working until someone deletes it.
- Access lives in more than one place. A second building, a car park or a server room on a separate system each need their own removal.
- The process stops at IT. HR tells IT, IT closes the accounts, and nobody tells the person who manages the doors.
- Shared credentials. A card lent to a colleague or a generic “contractor” card cannot be tied to one leaver.
How to remove building access the day someone leaves
- One credential per person. No shared or generic cards, so every badge belongs to someone.
- Revoke from one place, everywhere at once. One action should end access on every door and every site.
- Connect the directory. When joiners and leavers flow from Azure AD, Google Workspace, Okta or another SAML 2.0 directory, leaving the company ends door access too.
- Time-limit everyone who is not staff. Contractors and visitors get passes that expire on their own.
- Check the next day. Look in the audit trail for any event from that credential after the revoke.
What changes when the badge is on the phone
teamzPass issues employee badges and access passes to phones from one cloud platform, and revokes them the same way. One click removes the pass from the phone and from every door, so there is nothing to collect at the exit interview. Because each badge is bound to one phone, it cannot be lent like a card.
Lost and unreturned cards are the same problem seen from the installer’s side:
Doors that are offline when you revoke
A controller that has lost its connection keeps deciding with the rules it has, and receives the revoke when the connection returns. For doors where that gap matters, add a keypad PIN or fingerprint or face at that door. More in do door controllers decide locally when the internet goes down.
A same-day offboarding checklist
- HR sets the leaving date in the directory, and door access follows it.
- The person’s credentials are revoked on every site, including car parks and server rooms.
- Visitor and contractor passes they created as a host are reviewed.
- Any card or fob still in use is revoked, whether or not it comes back.
- The next morning, someone checks the audit trail for that name.
Visitors and contractors are covered in the Visitor management platform, and the full flow is in how teamzPass works.
Frequently asked questions
How do you revoke employee access immediately?
teamzPass revokes a credential in one click, and the revoke ends access at every door on every site at once. If leavers flow in from your directory, it happens as part of the normal offboarding step.
Do we need to get the badge back?
teamzPass phone badges are revoked remotely, so there is no card to collect. Cards and fobs, where you still use them, are revoked the same way: a returned card is a bonus, not the control.
What about contractors and visitors?
teamzPass visitor passes are time-limited and scoped to doors and hours, so they stop working on their own when the visit or contract window ends.
How do we show an auditor that access was removed?
teamzPass keeps a full audit trail: who revoked the credential and when, plus every grant and denial at the doors after that.
Why move badges to the phone?
teamzPass puts the badge on the phone people already carry: issued remotely before day one, bound to one phone so it cannot be lent, and revoked from every door in one click.
Want to see how same-day offboarding would work on your doors? Schedule a call and we will walk through it with you.