Illustrative internal SOP; actual security/legal requirements vary.
Remove standard application access after an approved departure request.
Prerequisites
Approved departure ticket containing identity, effective time, manager, and application scope.
Procedure
1. Confirm ticket status is Approved and the effective time has arrived.
2. Disable the user in Directory A.
3. Revoke active sessions.
4. Remove assigned application groups listed in the ticket.
5. Record completion evidence in the ticket.
Decision
If the account is flagged for a legal, security, or investigation hold, stop the standard workflow and use the authorized exception path.
Verification
A second operator confirms the directory status and ticket evidence where the internal control requires independent review.
Why it works: The SOP makes prerequisites, actions, exception, and verification distinct and does not invent the requirements of a real organization.