If a user has the logon access box checked and a r...
# administration
j
If a user has the logon access box checked and a role assigned, but they're inactive, are they still able to login?
s
I don't believe so, but might as well test with a fake user?
j
I don’t think it does either, but I wanted to ask to be sure. I just started at a new company and was just reviewing their user access and it jumped out at me as a potential security concern
s
Yeah definitely waste of a license so I would remove access as well.
k
It doesn't consume or license or allow login
j
awesome, thanks Kevin!
k
They will get error message "this role has been marked inactive" if they try to login.
<-- has had clients mark his employee inactive and had buckets of fun as a result
To make it update license count appropriately - you have to fully edit the employee record.
(i.e. don't mark it inactive from the list)
j
Okay good to know
k
The advantage to marking someone inactive as opposed to removing access is that you can mark them active again and they won't lose their bookmarks/config/etc.
So if someone is going away for a few months (i.e. paternity/maternity leave) it's a good idea. If the employee has been fired - I'd remove access, as there is no benefit to leaving the box checked in that case.