User lifecycle

Managing the user lifecycle covers the complete trajectory of an individual’s access within your organization: provisioning when joining, adjusting roles during internal transfers, and deprovisioning upon offboarding. Proper lifecycle management is a vital security discipline, as unmonitored or orphaned accounts that persist after an employee leaves represent one of the most significant access risks in enterprise SaaS environments.

Provisioning and onboarding

Provisioning is the process of creating a user account and assigning initial workspace access:

1. Targeted role assignment — accounts are created via direct invitation or bulk upload with specific roles pre-assigned. See Users and invitations.

2. Least-privilege baseline — users receive only the permissions required for their specific job functions on day one, eliminating excessive access windows. See the Capability matrix.

3. Day-one productivity — new team members land in a workspace pre-configured with the exact tools, connectors, and guardrails necessary for their specific position.

Role and team changes

When someone moves team or takes on more responsibility, an admin changes their role or their teams in People & Access. Access follows at once: tools a team grants arrive or leave with the team, and a new role’s capabilities apply on the next request.

Suspension and removal

Offboarding is just as important as onboarding. An admin has two moves:

• Suspend — the member keeps their account and history, but can no longer run any tool or agent in the workspace. Use it for leave, an investigation, or a contractor between engagements. Suspension can be lifted.
• Remove from the workspace — ends their membership. Their tools, runs, and the audit trail stay; their access does not.

Either takes effect immediately, and both are recorded in the audit log.

Note

Rival does not yet sync users from your identity provider (SCIM) or sign them in through it (SSO). Joining, moving, and leaving are admin actions in People & Access today — so make removal part of your offboarding checklist.

User lifecycle summary

Lifecycle stage	What the admin does	Result
Joiner (onboarding)	Invites them by email with a role and teams	They land with exactly the access those grant
Mover (role update)	Changes their role or teams	Access follows immediately
Leaver (offboarding)	Suspends or removes them	They can no longer run anything in the workspace

Next steps

• Invite and manage members → Users and invitations
• Manage user roles and permission boundaries → Roles overview
• Structure users into operational departments → Teams and departments