> ## Documentation Index
> Fetch the complete documentation index at: https://docs.budecosystem.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Onboarding and Offboarding

> Standardize secure user lifecycle operations

## Overview

A reliable lifecycle process reduces access drift, improves security, and makes audits easier.

```mermaid theme={null}
flowchart LR
    A[Request Access] --> B[Approve Role & Scope]
    B --> C[Invite User]
    C --> D[First Login + Validation]
    D --> E[Periodic Review]
    E --> F[Offboard / Deactivate]
```

## Onboarding Checklist

1. Validate requester identity and team ownership.
2. Assign the lowest role that supports required tasks.
3. Grant project-specific access first, global access second.
4. Record reason for privileged scopes.
5. Verify first login and expected dashboard visibility.

## Offboarding Checklist

1. Deactivate account immediately at departure.
2. Remove project memberships and elevated scopes.
3. Rotate shared credentials if operationally required.
4. Verify deprovisioned user can no longer authenticate.

## Common Mistakes to Avoid

* Granting `manage` when `view` is sufficient.
* Keeping stale invited accounts indefinitely.
* Allowing multiple unmanaged super-admin accounts.