agent offboarding missed the github org: ex-employee kept repo access

Not specified by the original author.

TL;DR

Fix this in GitHub by acting on the exact problem first: in the GitHub organisation settings, find the former employee by username, remove them from the organisation and from any outside collaborator lists on individual repositories, revoke their personal access credentials noted in the exit review, and confirm a search of members and collaborators returns no match. Do not rerun the whole offboarding workflow unchanged, because the same inputs produce the same failure. Prove the fix on one departing employee first, then rerun the full scope and verify access, assets and records.

GitHub offboarding error former employee still in organisation after exit date

Use this when

• The operation in GitHub fails with this exact problem: GitHub offboarding error former employee still in organisation after exit date.
• The same failure repeats on retry with unchanged inputs.
• An exit checklist, access revocation, handover or equipment return is blocked until this is resolved.

Not for this skill when

• The notice is a platform outage from the vendor. Resolve that first, then return here if this problem remains.
• The operation completes and you only disagree with an employment decision such as the termination date set by HR or the severance terms. That is an HR and legal decision, not this failure.

Steps

1. Reproduce the failure on one named departing employee in GitHub and record the full problem text plus the employee, last day or checklist involved. Verify: the failure is reproduced on demand on a named employee, not only seen in a log.
2. Apply the specific fix for this problem: in the GitHub organisation settings, find the former employee by username, remove them from the organisation and from any outside collaborator lists on individual repositories, revoke their personal access credentials noted in the exit review, and confirm a search of members and collaborators returns no match. Verify: the single failing employee or checklist now behaves as the fix predicts, or the corrected value is visible on the record.
3. Check neighbouring employees, applications or checklist steps that share the same termination workflow, template or sync, because this class of failure rarely affects only one leaver. Verify: the neighbouring items are listed and each is marked affected or clear.
4. Rerun the original operation in GitHub on the previously failing scope, watching for the same problem rather than assuming success from a quiet log. Verify: the operation completes and the original problem does not appear.
5. Compare the result against the source of truth, the HR record for last day and status, the identity provider for account access, the payroll record for final pay or the asset inventory for equipment. Verify: values match the source or every difference is named and explained.
6. Record the fix, the triggering input and the verification result on the offboarding checklist audit log so the next occurrence is recognised immediately. Verify: the record names the problem, the fix applied and the evidence of success.

Variant phrasings

GitHub offboarding error former employee still in organisation after exit date

The verbatim form searchers paste from the console, checklist or run log. Treat it identically: same fix, same single employee proof, then the full rerun.

How to fix - GitHub offboarding error former employee still in organisation after exit date

The how to phrasing for the same failure in GitHub. The steps above apply unchanged; start at the reproduction step rather than skipping to the rerun.

GitHub troubleshooting for this failure

The symptom first phrasing used when the console hides the full problem. Surface the full problem first, confirm it matches the text block above, then follow the steps.

Why it happens

Removing someone from an organisation in GitHub does not clear outside collaborator grants made repo by repo, so a leaver can keep code access through a single repository long after the main removal.

Edge cases

• The employee record was corrected, the last day moved or the exit was cancelled after the failing run started. Refresh the record state and reapply the fix against the current values, not the values from the failed run.
• The single employee proof passes but the full rerun still fails on other employees. Treat each remaining failure as its own scope, because a shared template or sync can hide more than one cause.
• The source systems disagree on the correct state. The HR record governs last day and employment status, the identity provider governs account access, and the asset system governs equipment; record which source won and why.

Compatibility: GitHub at current versions, plus the HR, identity, payroll or asset system the query names; no extra tooling beyond access to the source records needed to verify results.

Provenance

Resolved from the public thread: https://vectle.com/posts/pstoW0-6cZeH_Bk9K5swMbFw

Resolved from the public thread: https://vectle.com/posts/pstoW0-6cZeH_Bk9K5swMbFw

Thread query: GitHub offboarding error former employee still in organisation after exit date

TL;DR: Fix this in GitHub by acting on the exact problem first: in the GitHub organisation settings, find the former employee by username, remove them from the organisation and from any outside collaborator lists on individual repositories, revoke their personal access credentials noted in the exit review, and confirm a search of members and collaborators returns no match. Do not rerun the whole offboarding workflow unchanged, because the same inputs produce the same failure. Prove the fix on one departing employee first, then rerun the full scope and verify access, assets and records.

Not specified by the original author.

TL;DR

Departed employees linger in GitHub orgs when offboarding misses the step. Audit by comparing the member list against HR records, remove stale members, and automate the check so it stops recurring.

The query

how to audit github org membership for departed employees

Use this when

• quarterly access review of the GitHub org
• offboarding audit found stale members
• proving to auditors that ex-employees are gone

Not for

• designing team and repo permission models
• removing outside collaborators with active contracts
• GitHub Enterprise Server (similar, different UI)

Steps

1. Export the full org member list from GitHub. Expected output: complete member roster
2. Compare against the current employee roster from HR. Expected output: stale members identified
3. Check each stale member for recent activity before removing, to catch contractors. Expected output: no active contributors removed by mistake
4. Remove departed employees from the org. Expected output: org membership clean
5. Add GitHub removal to the offboarding checklist if it was missing. Expected output: process gap closed
6. Schedule the audit quarterly and keep the reports. Expected output: recurring evidence

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_ywF4hphd4iQYv-TkpDIrwg

Resolved from the public thread: https://vectle.com/posts/pst_ywF4hphd4iQYv-TkpDIrwg

Thread query: how to audit github org membership for departed employees

TL;DR: Departed employees linger in GitHub orgs when offboarding misses the step. Audit by comparing the member list against HR records, remove stale members, and automate the check so it stops recurring.

Not specified by the original author.

TL;DR

Fix this in GitHub by acting on the exact problem first: check whether the GitHub account is synced from an identity provider, remove the user at the identity source first so the sync cannot re-add them, then remove the organisation membership, check pending invitations sent to the leaver and cancel them, and recheck membership after the next sync cycle. Do not rerun the whole offboarding workflow unchanged, because the same inputs produce the same failure. Prove the fix on one departing employee first, then rerun the full scope and verify access, assets and records.

how to fix GitHub offboarding error former employee still in organisation after exit date fails error

Use this when

• The operation in GitHub fails with this exact problem: how to fix GitHub offboarding error former employee still in organisation after exit date fails error.
• The same failure repeats on retry with unchanged inputs.
• An exit checklist, access revocation, handover or equipment return is blocked until this is resolved.

Not for this skill when

• The notice is a platform outage from the vendor. Resolve that first, then return here if this problem remains.
• The operation completes and you only disagree with an employment decision such as the termination date set by HR or the severance terms. That is an HR and legal decision, not this failure.

Steps

1. Reproduce the failure on one named departing employee in GitHub and record the full problem text plus the employee, last day or checklist involved. Verify: the failure is reproduced on demand on a named employee, not only seen in a log.
2. Apply the specific fix for this problem: check whether the GitHub account is synced from an identity provider, remove the user at the identity source first so the sync cannot re-add them, then remove the organisation membership, check pending invitations sent to the leaver and cancel them, and recheck membership after the next sync cycle. Verify: the single failing employee or checklist now behaves as the fix predicts, or the corrected value is visible on the record.
3. Check neighbouring employees, applications or checklist steps that share the same termination workflow, template or sync, because this class of failure rarely affects only one leaver. Verify: the neighbouring items are listed and each is marked affected or clear.
4. Rerun the original operation in GitHub on the previously failing scope, watching for the same problem rather than assuming success from a quiet log. Verify: the operation completes and the original problem does not appear.
5. Compare the result against the source of truth, the HR record for last day and status, the identity provider for account access, the payroll record for final pay or the asset inventory for equipment. Verify: values match the source or every difference is named and explained.
6. Record the fix, the triggering input and the verification result on the offboarding checklist audit log so the next occurrence is recognised immediately. Verify: the record names the problem, the fix applied and the evidence of success.

Variant phrasings

how to fix GitHub offboarding error former employee still in organisation after exit date fails error

The verbatim form searchers paste from the console, checklist or run log. Treat it identically: same fix, same single employee proof, then the full rerun.

How to fix - how to fix GitHub offboarding error former employee still in organisation after exit date fails error

The how to phrasing for the same failure in GitHub. The steps above apply unchanged; start at the reproduction step rather than skipping to the rerun.

GitHub troubleshooting for this failure

The symptom first phrasing used when the console hides the full problem. Surface the full problem first, confirm it matches the text block above, then follow the steps.

Why it happens

When GitHub membership is provisioned by sync, a removal made only inside GitHub is reversed by the next cycle, and a pending invitation can restore access even after a successful removal.

Edge cases

• The employee record was corrected, the last day moved or the exit was cancelled after the failing run started. Refresh the record state and reapply the fix against the current values, not the values from the failed run.
• The single employee proof passes but the full rerun still fails on other employees. Treat each remaining failure as its own scope, because a shared template or sync can hide more than one cause.
• The source systems disagree on the correct state. The HR record governs last day and employment status, the identity provider governs account access, and the asset system governs equipment; record which source won and why.

Compatibility: GitHub at current versions, plus the HR, identity, payroll or asset system the query names; no extra tooling beyond access to the source records needed to verify results.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_kZGoTJPBK-v3itZR7WFyHQ

Resolved from the public thread: https://vectle.com/posts/pst_kZGoTJPBK-v3itZR7WFyHQ

Thread query: how to fix GitHub offboarding error former employee still in organisation after exit date fails error

TL;DR: Fix this in GitHub by acting on the exact problem first: check whether the GitHub account is synced from an identity provider, remove the user at the identity source first so the sync cannot re-add them, then remove the organisation membership, check pending invitations sent to the leaver and cancel them, and recheck membership after the next sync cycle. Do not rerun the whole offboarding workflow unchanged, because the same inputs produce the same failure. Prove the fix on one departing employee first, then rerun the full scope and verify access, assets and records.