Solved: Off-boarding users from Windchill+

Konstanty · ‎Aug 07, 2023

Hello,
I am a Business Administrator/orgadmin (org level access only, no site access) for newly launched Windchill+ (Windchill 12) and I am looking for an off-boarding process best practices.

How do you manage the users that left the company, changed their jobs or should not access the system for any other reason?

Just remove them from the license group?

Add to another (functional) group with no roles assigned, called eg. "Deactivated Accounts" or something?

What about their workspaces/objects and checked-out work if any?
Does PTC actually recommend anything for cloud solutions?

I found the thread Off-boarding procedure - PTC Community but it was couple years back and little replies. Also I was not sure if that is about the SaaS Windchill.

avillanueva · ‎Aug 07, 2023

Here are a couple of articles on this:

https://support.ptc.com/help/wnc/r12.1.0.0/en/index.html#page/Windchill_Help_Center/participantadmin_chp/ParticipantAdminChp_UserDelete.html

https://www.ptc.com/en/support/article/CS200852?source=search

https://www.ptc.com/en/support/article/CS167448?source=search

https://community.ptc.com/t5/Windchill/Deactivated-Users-What-restrictions-are-forced-by-adding-a-user/m-p/803732#M67359%3Fsource=search

There are two methods, move them into a group that denies rights to do anything (will trump granted rights) or delete from the system. The benefit to just moving to a deactivated group is that you can restore that user's account later and they retained their rights before. We do have users who come and go or come back as a contractor. We've opted to delete the account. It aligns with our IT and AD policy and I have would have to rebuild their access to Products anyway. In either case, the user would not be able to do anything with the old account in the system.

View solution in original post

avillanueva · ‎Aug 07, 2023

Here are a couple of articles on this:

https://support.ptc.com/help/wnc/r12.1.0.0/en/index.html#page/Windchill_Help_Center/participantadmin_chp/ParticipantAdminChp_UserDelete.html

https://www.ptc.com/en/support/article/CS200852?source=search

https://www.ptc.com/en/support/article/CS167448?source=search

https://community.ptc.com/t5/Windchill/Deactivated-Users-What-restrictions-are-forced-by-adding-a-user/m-p/803732#M67359%3Fsource=search

There are two methods, move them into a group that denies rights to do anything (will trump granted rights) or delete from the system. The benefit to just moving to a deactivated group is that you can restore that user's account later and they retained their rights before. We do have users who come and go or come back as a contractor. We've opted to delete the account. It aligns with our IT and AD policy and I have would have to rebuild their access to Products anyway. In either case, the user would not be able to do anything with the old account in the system.

HelesicPetr · ‎Aug 07, 2023

Hi @Konstanty

As @avillanueva has mentioned the articles, there is no change from that time to now, and Windchill+ changes nothing.

All old procedures and ideas how to do so are still applicable.

PetrH