Deleting accounts is a topic that has to be approached on a system by system basis. There are many considerations to take when deleting an account on a platform, which is outlined below.
- User Data
- Depending on the platform user data may need to be retained and/or transferred. In this scenario it is important to have a specific timeframe set when deleting accounts. Data such as emails or important documents that are associated with an account will typically be wiped out when the account is deleted. This must be considered when deleting accounts.
- Licensing
- Licensing is a concern as there is typically a cost attached to each user account. It is best practice to remove the license to the user if possible, to save on the cost of the account. Check with the vendor to make sure that removing the license does not affect any data associated with the account.
- Username Considerations
- The most important thing to consider when deleting accounts is the concept of usernames. Usernames should not be reused as it can affect various access controls. The first system to consider is an email platform. Deleting an account will free up the username to be used. If the account deleted contains access to sensitive information then it is possible to provide an email address to a user that can receive data meant for a higher level of security.
- Identity Management System
- The Identity Management system will not delete accounts. For historical audit, the system will hold the identity for reporting. Since RapidIdentity is considered the source for username generations it will act as a username repository for the system.