How do I remove system access quickly when someone leaves?

Use a documented offboarding checklist tied to the employee's accounts, groups, devices, tokens, shared passwords, and vendor systems. Disable the main identity first, revoke active sessions, then verify that downstream access is removed.