Remove a person's access

Remove the access assignments and credentials a person no longer needs, and address their portal access separately. Use a Full Access administrator account for the complete procedure.

Before changing an administrator's access, make sure another administrator can manage the account; see Choose administrator roles and permissions. These steps do not transfer account ownership.

Review and remove access

1. Open People → Users and select the person. In User Info., review Basic Information, Credentials, Assigned Group(s), and Assigned Schedule(s). Note the assignments you need to remove before making changes.
2. If the person no longer needs portal access, turn Portal Access off in Basic Information and select Update. Turning off Portal Access does not replace removing the person's mobile credential or door-access assignments.
3. In Credentials, remove the credentials that should no longer be assigned:
   • Face: Open the Face menu and select Delete. Check that the dialog names the face credential, then confirm with Remove (or Delete if shown).
   • Card or key fob: Open Card or Key FOB → Details. Use the card's delete control, check the confirmation, and select Delete. Repeat for other assigned cards.
   • Mobile: Open Mobile Credentials → Delete and select Delete in Confirm Deletion.
   • Cloud Key: Open Cloud Key → Details. Select the key's Deactivate control. In Confirm Cloud Key Deactivation, select Delete to confirm. Repeat for other keys that must be deactivated.
4. In Assigned Group(s), use the removal control beside each unwanted group and confirm with Remove. For complete group removal, the section menu offers Remove All; confirm with Remove. Removing this person from a group avoids changing the group's access for its other members.
5. Review Assigned Schedule(s). GROUP NAME identifies group-derived rows. For each unwanted direct assignment, select Remove Schedule and confirm with Remove. A group-derived assignment must be addressed through that person's group membership; do not delete the shared schedule to remove one person.
6. Return to the person's record and review the remaining credentials, groups, schedules, and Portal Access setting. If a change fails, retain the displayed error and contact support.
7. If your offboarding decision also calls for suspending the user, return to People → Users, open their row menu, and select Suspend. Read Confirm Suspension, enter Suspend in the confirmation field, and select Suspend User. Do this after the record review: suspended users' User Info. pages cannot be opened from the list.

Finish the offboarding handoff

A saved change or a Suspended status does not confirm when every reader or existing portal session stops accepting access. For urgent revocation, contact support with the affected user, doors, change time, and any errors so the remaining access can be addressed.

Some controls are unavailable for users managed through Microsoft Entra ID. If Suspend or Delete User is absent, involve the administrator responsible for that account's sign-in management. Do not reactivate a suspended user merely to inspect their details.

Delete User is a separate, irreversible account-deletion action. Do not use it as a substitute for reviewing credentials, assignments, or administrator handover. For a lost credential that needs replacement, see Find system details and contact support.