Multi-Location Dental Employee Offboarding: What to Remove When Staff Leave
Access should be removed from every system and location when a dental employee leaves the practice.
Short Answer
Employee offboarding at a multi-location dental practice should end every route the departing person has into the organization, not just their email account.
That can include practice management software, imaging and clinical systems, email, cloud storage & patient communication platforms. This can also include remote access, vendor portals, payment or billing tools, company devices and physical access across multiple offices.
For dental practices subject to HIPAA, the Security Rule addresses terminating workforce access to electronic protected health information when employment or another workforce arrangement ends. HHS audit guidance also looks for evidence that access was removed or modified in a timely manner and that each person using systems containing ePHI can be uniquely identified.
The difficult part for a multi-location practice is not knowing that an employee left.
It is knowing everywhere that employee could still get in.
1. The Dental Offboarding Problem Is Bigger Than One Account
Picture a team member who works at three offices.
On Monday, she handles the front desk at one location. Wednesday she fills in at a second. On Friday she helps the regional manager at a third.
To do that job, she may have access to the practice management system across several locations. This can also include remote access, vendor portals, billing tools, company devices and physical access across locations.
Then she leaves.
The office manager disables her email and assumes the job is finished.
But her practice management account is still active. Her remote access credentials still work. A browser at the second location still has a saved login. A vendor portal nobody remembered during offboarding still recognizes her account.
That is what makes dental offboarding different from checking a box in HR.
The employee may be gone from one organization, but their access was distributed across multiple offices, multiple vendors and systems that do not all share the same identity directory.
For practices subject to HIPAA, HHS specifically addresses termination procedures for access to ePHI. Its audit guidance examines whether organizations deactivate information system access, recover access devices, account for contractors when applicable and document that termination occurred in a timely manner.
The operational goal is simple:
When employment ends, access should end everywhere it no longer belongs.
The execution is where practices get into trouble.
2. Access Inventory: Start With Everywhere the Employee Could Reach
A dental offboarding process should begin with an access inventory tied to the employee, not with a generic list of applications.
For a single location office, somebody may remember most of the systems from memory.
That gets less reliable as locations multiply.
Start with the employee's actual role and ask:
What could this person reach?
For a front desk employee, that might include the practice management system, patient scheduling, patient communications and workstation access.
For an office manager, add administrative permissions, vendor relationships, reporting, payroll or finance systems, password manager access and potentially credentials covering more than one location.
For a provider or hygienist, there may also be clinical systems, imaging access, electronic prescribing, and provider-specific workflows.
Then add the multi-location question:
Which offices could this account reach?
That matters because dental software can include location specific permissions.
Denticon, for example, allows administrators to associate users with particular offices. Open Dental supports clinic restrictions and default clinic settings on user accounts. Dentrix Enterprise can apply security rights at the clinic level.
A user who normally works in one office may therefore still have authorization into several others even if staff at those locations rarely interact with them.
Offboarding has to follow the permissions, not the employee's usual desk.
3. Data Preservation: Transfer the Work Before You Remove the Person
Offboarding should preserve business information and ownership before access is disabled or accounts are deleted.
This is especially important when an employee owns operational knowledge or business information the practice still needs.
Before the cutoff, identify things such as:
company email that needs to be retained
shared documents or files associated with the departing employee
vendor conversations
recurring operational tasks
calendar ownership
documentation
saved reports
responsibilities another employee needs to inherit
Then transfer responsibility.
The principle is:
Preserve what the practice needs; remove the departing person's ability to reach it.
That is different from keeping an employee's account active indefinitely because somebody might need something later.
Dental systems also illustrate why historical identities should not simply be recycled.
Dentrix recommends creating a unique ID for a new staff member rather than editing and reusing a former employee's identity. The original ID can be associated with appointment history, security rights, time clock activity, audit history and other records.
Open Dental similarly allows departing users to be hidden rather than deleting their historical identity. Provider departures can also involve additional steps such as reviewing operatories, future appointments and provider assignments.
The objective is not to erase the fact that the employee existed.
It is to preserve the history while ending their access.
4. Practice Management Access: Remove the User Across Every Location
The practice management system should be treated as its own offboarding workstream because it may not automatically follow your email or directory account.
Disabling Microsoft 365 or Google Workspace does not necessarily disable Dentrix, Open Dental, Denticon, or another dental platform.
That separation is easy to miss.
Open Dental, for example, maintains its own users, user groups, permissions and audit history. Its documentation recommends individual usernames and passwords for people using the system.
Dentrix likewise supports user IDs and granular security rights that can be assigned according to a person's responsibilities.
For a departing employee, verify that:
their user account is disabled, hidden or otherwise made unusable using the vendor's supported process
administrative permissions are removed
access to every applicable clinic or office is removed
employee specific or provider specific integrations are addressed
future assignments, schedules or workflows are transferred where necessary
historical identity and audit information are preserved where appropriate
Do not assume that removing someone from the schedule removes their system access.
Those are two different things.
5. Identity and Cloud Access: Cut Off the Systems Around the Clinical Stack
The employee's company identity should be suspended at the agreed cutoff time and every connected cloud service should be reviewed for independent access.
This includes obvious systems such as company email and cloud storage.
But dental practices often accumulate separate tools around the main practice management platform:
patient communication services
insurance and clearinghouse portals
online forms
payroll and HR systems
payment administration
phone systems
collaboration tools
vendor ticketing portals
remote support platforms
password managers
Some may use the employee's company identity.
Others may have completely separate usernames and passwords.
Some may even have been created directly by the employee.
That last category is where offboarding becomes difficult.
A useful rule for future onboarding is that business systems should be owned by the practice and tied to company controlled identities whenever the platform allows it.
Then offboarding becomes disabling controlled access instead of trying to recover a system registered to somebody's personal email address.
At separation, suspend the company's primary identity, revoke active sessions where supported and then work through the systems that maintain separate credentials.
Changing one password is not an offboarding process.
6. Remote and Vendor Access: Close the Doors Nobody Sees
Remote access and vendor tools deserve their own offboarding check because they can provide a route back into the practice without the former employee being physically present.
Review:
VPN accounts
Remote Desktop access
remote support tools
password manager vaults
vendor administration portals
cloud management consoles
third party applications that connect to patient or business systems
HHS cybersecurity guidance advises healthcare organizations to terminate computer and application access, including remote and administrative access. When workforce members leave and to recover company property and physical access devices.
This matters even more when someone supported several offices.
A former regional manager may not need a physical key to enter another location if their remote credentials still reach a server or workstation there.
For each remote access method, ask two questions:
Can this employee still authenticate?
And:
Did they know or hold any credential that other people still use?
The second question leads to one of the most persistent access problems in small and multi-location environments.
7. Shared Workstations and Shared Credentials: Remove Access Without Losing Attribution
Shared physical computers do not require shared identities.
A reception workstation may be used by several people in one day.
An operatory computer may change hands between assistants, hygienists and providers.
That makes speed and usability important.
But it does not remove the need to know which person performed an action.
HIPAA's Security Rule includes a unique user identification standard so activity involving systems containing ePHI can be associated with an individual workforce member.
Open Dental's security guidance similarly recommends unique usernames and passwords, and its audit trail can associate actions with the user who performed them.
That means offboarding should include more than removing the employee's named account.
Look for shared or generic credentials the departing employee knew.
If a shared credential genuinely must remain in use, rotate it and redistribute it only to the people who are still authorized.
Also recover:
company laptops
phones
security keys
badges
physical keys
other access devices
A former employee should not retain a second route back into the environment because the official account was disabled but a shared password never changed.
8. Verification and Audit Trail: Prove the Offboarding Actually Happened
An offboarding checklist is not complete when somebody says they handled it. It is complete when the practice can verify that access is gone.
That distinction matters.
The final step should include a review of the access paths that mattered for that employee.
Confirm that:
the primary company account is suspended
practice management access is inactive
location assignments have been removed
remote access no longer works
devices and keys have been returned
shared credentials were rotated where necessary
administrative roles have been transferred
business information was preserved where required
Then record who completed the offboarding and when.
For systems that maintain audit history, use it.
Open Dental's audit trail, for example, can record activity associated with individual users. That historical record is another reason individual identities should be preserved rather than reused for the next person.
HHS audit guidance likewise looks for documentation showing that access to ePHI was terminated according to organizational procedures and that changes to access were actually carried out.
You want to be able to answer:
When did this employee's access end, what did we disable and who verified it?
Not:
"I think the office manager handled that."
9. One Offboarding Workflow: Stop Making Every Departure a Memory Test
A multi-location dental group should use one repeatable offboarding workflow regardless of which office the employee worked in.
The locations may have different equipment.
They may have different vendors.
One office may run technology another does not.
But the process for identifying and removing access should be centralized.
One person should own the offboarding event.
That does not mean one person has to perform every technical step.
The office manager might collect keys and equipment.
IT might revoke accounts and remote access.
A practice administrator might transfer vendor ownership.
A clinical leader may need to reassign provider schedules or responsibilities.
But someone needs to own the checklist from beginning to end.
Otherwise, each person assumes somebody else handled the system outside their area.
That is how a former employee ends up with no email account, but still has practice management access at location number three.
A Practical Sequence for a Multi-Location Practice
This week: Choose one person who owns employee IT offboarding. Take one recent departure and reconstruct every system that person could access. Include each practice location separately rather than writing "practice-management software" once.
This month: Turn that inventory into a role based checklist for front desk staff, office managers, clinical staff and regional personnel. Define the exact access cutoff time and decide who handles identity, practice management software, remote access, devices, physical access and vendor accounts.
This quarter: Review former employees across the systems that matter most. Look specifically for active practice management users, remote access accounts and people still authorized for offices where they no longer work.
Then repeat the review periodically.
The goal is not more paperwork.
It is knowing that a person's last day at the practice is also the last day their access still works.
Frequently Asked Questions
What accounts should a dental practice disable when an employee leaves?
Start with the employee's primary company identity, practice-management software, email, cloud storage, patient communication tools, remote access, vendor portals, payment or billing administration, password-manager access, and any clinical or imaging system assigned to them.
The exact list should come from the employee's actual role and location access rather than a generic application checklist.
When should a departing dental employee's access be removed?
Define an exact cutoff time tied to the separation.
For a normal planned departure, access should end when the employee no longer needs it to perform authorized work. For involuntary or higher-risk separations, the practice may need to coordinate access removal with the separation itself so there is not an unnecessary period where access remains available.
Should we delete a former employee from our dental practice-management system?
Not automatically.
Many platforms preserve the user's historical identity because it is connected to audit history, appointments, permissions, or other records. Open Dental, for example, allows departing users to be hidden rather than deleting them, while Dentrix recommends creating a new unique ID for a new staff member instead of repurposing a former employee's identity.
Can dental staff share one login on a shared workstation?
A shared physical workstation does not mean everyone should share the same application identity.
For systems containing ePHI, HIPAA includes a unique user identification requirement so activity can be associated with a specific workforce member. Dental systems may also rely on individual accounts for permissions and audit history.
What changes when an employee works at multiple dental locations?
You need to review location-level authorization in addition to the employee's account itself.
Dental platforms can associate users, permissions, or clinic access with specific offices. The offboarding process should therefore confirm every location the employee could reach, not only their primary office.
Is disabling the employee's email account enough?
No.
Practice-management platforms, remote-access tools, vendor portals, imaging applications, payment systems, patient communication platforms, and other services may maintain separate credentials.
Offboarding has to follow every independent route into the organization.
Does HIPAA require a specific employee offboarding checklist?
HIPAA does not prescribe a specific employee offboarding checklist.
The Security Rule addresses procedures for terminating access to ePHI and unique user identification, while HHS guidance and audit materials address timely access removal, recovery of access devices, and documentation.
A checklist is an operational method for making those responsibilities repeatable.
Who should own dental employee offboarding?
Assign one accountable owner even when several people perform individual steps.
In a smaller group, that may be the practice administrator or operations lead working with IT. In a larger organization, it may be centralized operations or HR working with IT.
What matters is that someone owns completion across every location and system.
Take the Next Step
Employee offboarding gets harder when one person has accumulated access across several locations, vendors, workstations, and clinical systems.
That's why I've put the process into a Multi-Location Dental Employee Offboarding Checklist: one place to track practice-management access, company accounts, devices, remote access, vendor systems, physical access, and final verification.
Get the Multi-Location Dental Employee Offboarding Checklist
If you're not sure whether a former employee still has access—or your current process depends on whoever happens to remember each system. Carter Systems IT helps multi-location dental and orthodontic practices build more consistent employee-access and offboarding processes.
Related Reading
Sources
U.S. Department of Health and Human Services — HIPAA Security Rule and HIPAA Audit Protocol
U.S. Department of Health and Human Services — Health Industry Cybersecurity Practices
U.S. Department of Health and Human Services — guidance on unique user identification
Open Dental documentation — security users, clinic restrictions, permissions, audit trail, and employee/provider departure procedures
Dentrix documentation — unique staff IDs and user security rights
Planet DDS / Denticon documentation — office assignments and multi-location user access
