Offboarding user - Best Practice

Implemented

Offboarding user - Best Practice

avatar

Hello,

we like to offboard some users in our RDM database. At the moment they have no access-rights and no license, but we want to delete those objects.
We did not, because we assumed, old log-entries will have IDs instead of usernames or get deleted.

What is the (concrete technical) best practice?

My wish for offboarding a user:

  • After x days/month the user-object will get deleted (e.g. by ps script or even better a RDM internal maintenance task)
  • The regardings access-logs etc. could be deleted optional or afterwards seperately, so there is no more orphaned data in the db



Best regards,
Daniel

All Comments (6)

avatar

Hello Daniel,

Thank you for contacting us.

Unfortunately, we currently do not have a knowledge base article specifically addressing "Offboarding". However, when it comes to offboarding a user, we recommend deleting the user by going under "Administration" -> "Users".
https://docs.devolutions.net/rdm/windows/commands/administration/management/user-management/#manage-users

Based on my understanding, removing the user's data should not impact any existing logs or records.

Let me know if you have any additional questions.

Best regards,

Samuel Dery

avatar

Hello Samuel,

thanks for your feedback.

Based on my understanding, removing the user's data should not impact any existing logs or records.


Could you please "doublecheck", that no Log-Data will be deleted or changed into IDs, when deleteing a user?
I won't like to use a backup, if avoidable. ;-)

Also an article would be nice, since offboarding is realy important for us, not primarily in a technical manner, that's simple regarding RDM (as far as i know),
but especialy regarding legal reasons and considering connections between different objects (e.g. users/logs/access).


Best regards,
Daniel

avatar

Hello,

Thank you for your reply,

No problem, from quickly, testing on my end I can indeed confirm that the User column still retains the User information even after this user is deleted.

I've created a case with our Documentation team to see if a knowledge base article could be created regarding this.

Let me know if you have further questions,

Best regards,

Samuel Dery

avatar

Hello Samuel,

thank you so far. No more questions.


Best regards,
Daniel

avatar

Hello Daniel,

Perfect! I've linked the documentation team case to this thread, we will keep you updated with any development regarding this!

Best regards,

Samuel Dery

avatar

Hello Daniel,

Thank you for your patience,

I wanted to inform you that our documentation team created the following article regarding this:
https://docs.devolutions.net/kb/remote-desktop-manager/knowledge-base/offboarding-users/

Best regards,

Samuel Dery