Everything is controlled through active directory. A new user get an account and with security groups access to different systems are provided. Everything is AD

Everything is controlled through active directory. A new user get an account and with security groups access to different systems are provided. Everything is AD joined or uses ADFS. When a user leaves, their account in Active Directory is disabled.