People operations owner
The action waits until this owner approves or denies it.
Workflows · Employee offboarding
The offboarding approval names the employee and effective time.
Keep the employee identity, effective time, affected access, decision, and revocation results together.
Agent request
Disable employee@example.com and revoke active application sessions
Selecting the wrong identity can lock out an active employee; a partial revoke can leave access behind.
- Identity
- offboarding-agent · People operations
- Target
- employee@example.com
- Cost
- Recorded agent cost
- Evidence
- Effective time, employment record, and access inventory
Policy decision
Employee account disablement requires the People operations owner.
Tool call resumes
The identity tool disables the approved account and returns each revocation result.
Tool call stays blocked
The account remains active and no sessions are revoked.
Execution order
The agent request stops before the connected tool runs.
- 01Offboarding agent requests account disablement
- 02Deixic checks the identity, effective time, access, and policy
- 03People operations owner decides
- 04Connected identity tool returns the disablement result
The request, decision, recorded cost, and execution result remain in activity history.