Choose the change the job requires
For a change of responsibilities, identify the areas and actions the person should retain, gain or lose. Use roles and profiles to separate management authority from information access.
A profile can extend the Everyone default or replace it, depending on its configuration. Removing an assignment does not itself prove that default, direct or group grants have gone. Likewise, Locked down does not erase every existing grant.
Inspect and update the intended account
In the Mind’s Portal, open Settings, then Members under Workspace, to reach Team access. Inspect the person’s Access profile and Effective access. The owner can manage access; an admin needs the relevant delegation. Role management is a separate delegation and does not allow changing the owner’s role or the viewer’s own role through those controls.
Choose the intended profile through the available control, then inspect the result. Check a harmless permitted task and an intended restriction using that person’s own account.
Separate a departure from a profile change
Removing membership on the account site and closing local Portal access are separate surfaces. Use the owner account and follow the supported departure process for the intended person. Do not treat a local row disappearing as proof that all credentials, model routes and memberships have been revoked everywhere.
The Portal’s Remove member flow includes a chat-history choice: Export, then delete or Delete only. Confirming it deletes that local chat history; an export must be downloaded from the result before dismissing it. Read every result shown. This is a consequential action to review with the responsible owner, not a routine substitute for changing a profile.
Follow up on partial removal
The local removal result can report that gateway-token lineage is pending account-side removal and model routes or broker-token work is unavailable from the Portal. Have the authorised owner or operator complete those named steps and confirm the final account membership and credential state. A successful local cleanup does not establish full departure completion.
Reconcile before retrying
If the connection fails, inspect the intended person’s current membership and each reported surface before repeating removal. Some cleanup may already have happened. Keep an export and the removal result with the authorised owner; never paste a token into a shared note to prove it was revoked.
Related
Practical guides for people and agents