Remove access

When someone leaves your company, an administrator can cut their access to the company workspace in a few clicks. Read this page before you do it, or when you have been told your own access was removed and want to understand what that means.

Who can remove access

Only the administrators of your company can remove or restore someone’s access. A member never sees these gestures. If you lose your administrator role while the page is open, Ryno refuses the removal when you confirm it.

An administrator is one of two fixed roles. The person who set your company up is the first administrator, or the longest-standing member if that person is gone. An administrator can name another administrator, or take the role back, and your company always keeps at least one: when a gesture would remove the last one, Ryno refuses and says:

Your company workspace always needs at least one administrator.

Roles and governance lists what each role can do.

Remove someone’s access

The gesture lives in the web application, on the page that lists your members, at /company/members. Open the actions of the person’s row, choose Remove access, and confirm. The confirmation names the person and says what will happen before you commit.

The desktop application has no removal button at all. It shows each person their own role and, if you are an administrator, a Manage members link that opens that page in the web application.

What changes right away

• Every session of the person is cut, on every computer where they were signed in.
• If Ryno is open on their computer, it tells them so straight away.
• A new sign-in is refused, even with an address of your company’s domain.

The person reads this, word for word, when Ryno refuses them:

Your access to your company workspace was removed. Ask an administrator of your company if you think this is a mistake.

Their name stays in the members list with the date and the name of whoever removed them, and the gesture is written in the activity log.

Pipeline tokens

The pipeline tokens the person issued are yours to regenerate. After the removal, Ryno reminds you on the members page which projects they issued a token for. If they may have kept a copy, regenerate the token of each of those projects from Ryno and update the secret in your pipeline.

Restore an access

Removed people are listed under the Removed tab of the members page, with who removed them and when. Choose Restore access on their row. The person can sign in again and gets the role they had before. Nothing else is needed: their repositories and history were never touched.

Restoring someone takes a free seat. When no seat is free and your company has an active subscription, the confirmation shows what one more seat costs and buys it with the restoration. If the payment is refused, nothing is restored.

What stays on the person’s computer

Ryno does not erase any file on the person’s computer, and it does not pretend to. After the removal, Ryno lists what is still there:

• Synced company workspace: the copy of the company workspace Ryno kept on the computer.
• Catalog cache: the catalogs it had already downloaded.
• Interface state: what was open and where, for each workspace.
• Run history, reports and screenshots: what the person ran on the computer.
• Recent repositories: the repositories they opened lately, named but not scanned.

Their own repositories and flows are theirs to keep using. Company catalogs simply stop updating.

Not covered yet

Two cases are not handled by this version, and this page makes no promise about when they will be:

• Contractors who do not have an address of your company’s domain cannot join the workspace.
• Single sign-on configured for each customer is not available.