## Automatically offboard users

URL: https://docs.atlan.com/product/capabilities/governance/access-control/references/user-offboarding

> Automatically downgrade users to the Guest role when they leave, using the offboarding app. Set up a workflow that revokes access based on group membership, with no manual edits per user.

<!--vale off-->

# Automatically offboard users 

<!--vale on-->

User Offboarding is an Atlan app that automatically downgrades users to the Guest role when they are added to a designated offboarding group. It is designed for organizations that need to revoke access consistently when employees or contractors leave, without editing each user manually. Once the workflow runs, affected users land in a read-only state based on their group membership in Atlan.

## Prerequisites 

Before you begin, make sure you have: 

- Access to the **User Offboarding** app. If you don't have access, contact [**Atlan support**](https://docs.atlan.com/support/submit-request) or your Atlan customer team to request it. 
- A dedicated group in your identity provider (IdP) or user management system for offboarded users (for example, `offboarded-users`). 
- The **Guest role** available in your Atlan tenant to provide consistent role downgrades. 

## Setup workflow

1. In your Atlan workspace, go to the homepage and click **New workflow** in the top navigation bar. 

2. Search for **User Offboarding**, and then select **Set up workflow**. 

3. In the **Workflow name** field, enter a descriptive name that clearly identifies the purpose of this workflow. 
 *Example:* 

 ```js
 atlan-prod-user-offboarding
 ```
4. In the **Offboarding method**, select the Role update to Guest. This is the default and only available option, which enables you to downgrade offboarded users to the Guest role with minimal, read-only access.

5. In the Group list field, provide the names of Atlan groups that contain offboarded users. Enter multiple group names separated by commas. For example:

 ```
 offboarded-users, alumni
 ```
 :::info
 Users already assigned the Guest role or belonging to multiple groups are skipped, while users with only one of the specified groups are downgraded to Guest.
 :::

6. Schedule and run the workflow. Run it manually or set a recurring schedule to automatically downgrade offboarded users and keep role assignments up to date.

## Need help?

If you have any issues related to configuring the app, contact [Atlan support](https://docs.atlan.com/support/submit-request).

---