How to revoke access granted to a former employee

Secure your hotel site quickly

Key points • Identify access restrictions • Delete or disable the affected account • Verify remaining roles and sensitive permissions • Reinforce internal security and best practices

When an employee leaves your establishment or agency, it is essential to immediately revoke their access to maintain the security of the site and your data. Strict permission management protects your online reputation, prevents user errors, and ensures the confidentiality of your hotel's sensitive information.

This guide helps you manage this step simply, while ensuring a smooth transition between teams.

Identify the type of access to be removed

Depending on your hotel's structure, the former employee may have several levels of access: • Editor access to update website content • Designer access to modify page structure • CMS access to manage rooms, offers, or news • Access to connected tools (analytics, reservations, trackers, etc.)

Start by drawing up a complete list of associated accounts and identify the one that needs to be deleted.

💡 Tip: Regularly take inventory of users to maintain a small and controlled team.

Remove the account from user management

From the administration area, access the user section. Select the former employee, then delete or deactivate their account. Immediate deletion is generally recommended to prevent any future logins.

Once the operation has been completed, verify that Editor, Designer or CMS access is no longer active for that person.

💡 Tip: prefer deletion rather than simple deactivation if the collaborator will not return to the team.

Reassign content or roles if necessary

If the former employee managed critical pages, collections, or elements, ensure that their ownership is transferred to a current member of the marketing or communications team.

This prevents some of the content from becoming inactive, difficult to maintain, or impossible to publish.

Check the overall security of the site

After removing access, take the opportunity to perform a complete check: • verify the permissions of the remaining users • ensure that no unnecessary super-admin access remains • update passwords shared between teams • check connections from external applications (marketing integrations, booking, tracking)

💡 Tip: Implement an internal protocol. When an employee leaves the hotel, deleting access should be part of the standard HR procedure.

Communicate internally to avoid oversights

Notify the marketing, operations, or technical teams that access has been revoked. This avoids confusion, especially if several people are working on updating the hotel website.

Encouraging clear communication limits errors and strengthens overall safety.

Conclusion

Removing access from a former employee is a key step in ensuring the digital security of your organization. By revoking their access, verifying active roles, and reinforcing internal best practices, you guarantee a secure work environment and reliable website management. This approach is part of sustainable governance and contributes to the quality of your online presence.