Agent WranglersOrganisations and teams Required
Remove access when someone leaves
When a member leaves or is removed, end their access to that organisation on their next request, and keep the work they made there.
How to do it
Delete the membership and revoke their API keys, app grants and shared links for that organisation. Leave their other organisations alone. Keep their records, shown under their name as a former member. Hand records that need an owner, such as scheduled reports, to someone the admin picks. Let any member leave on their own, unless they are the last owner.
How to check
Remove a signed-in test member. Their next request to the organisation answers 403 or 404, their API key gets 401, and their documents are still there.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers accounts playbook: https://agentwranglers.se/playbook/accounts/organisations-and-teams/member-removal.