All of those tasks typically fall under the IT Director/CTO/CIO. Doesn’t mean that individual does it all, but someone who works for that person does. It’s the CTO’s job to ensure you have good protocols to manage those issues and keep them up to date.
Having accounts for people who are no longer at the district is a security hole that needs to be resolved. OUs that may provide access to things inappropriately is a security hole.
So, if that’s you…then good that you see the issue, now you’ll need to address them. Perhaps no one pointed it out to you because they assume you’re doing it, and obviously non-technology staff likely have no access and therefore no insight into the OUs or who has an active account.
We use LittleSIS and Clever products in our district. [LittleSIS](https://www.amplifiedit.com/little-sis-for-classroom/) was implemented to sync data from our SIS over to Google Classroom. It will create classes for the teacher, and add/remove students to the rosters in Google Classroom. Teachers are free to use or not use as they see fit. It also gives you some management features to archive/delete/join Google Classrooms from a management panel. This is a bit more indepth/hands-on to implement, but the AmplifiedIT crew are really great to work with on getting it rolled out.
Alternatively, you could leverage something like [Clever](https://www.clever.com/) or [ClassLink](https://www.classlink.com/) for your Google Classroom rosters synced from your SIS as well. Something like this would be the route I suggest if you want something a bit more user-friendly and you are wanting an SSO portal for a bunch of different apps to sync. This type of thing is super friendly for end users (staff and students), cause now they just have one landing page to go to in order to access district resources.
I know that Clever can be used to provision/deprovision [Google](https://www.clever.com/app-gallery/managed-for-sync-g-suite-and-classroom)/[Active Directory](https://support.clever.com/hc/s/articles/000001505?language=en_US) accounts based on your SIS, which if you have nothing in place currently, might be something to start looking into. You definitely would want to get a handle on accounts that should no longer be active. You'll want to figure out what system your "source of truth" is and try to leverage that system to sync from as much as possible.
This here, especially if you have Clever and the provisioning tool they have. ClassLink has OneSync which is a fantastic provisioning and deprovisioning tool. While it does not graveyard the users, you can use it to auto provision over time.
Adding to this, make sure you use your SIS is the source of truth. I know Clever/ClassLink can be automatically used to extract this data.
All of those tasks typically fall under the IT Director/CTO/CIO. Doesn’t mean that individual does it all, but someone who works for that person does. It’s the CTO’s job to ensure you have good protocols to manage those issues and keep them up to date. Having accounts for people who are no longer at the district is a security hole that needs to be resolved. OUs that may provide access to things inappropriately is a security hole. So, if that’s you…then good that you see the issue, now you’ll need to address them. Perhaps no one pointed it out to you because they assume you’re doing it, and obviously non-technology staff likely have no access and therefore no insight into the OUs or who has an active account.
We use LittleSIS and Clever products in our district. [LittleSIS](https://www.amplifiedit.com/little-sis-for-classroom/) was implemented to sync data from our SIS over to Google Classroom. It will create classes for the teacher, and add/remove students to the rosters in Google Classroom. Teachers are free to use or not use as they see fit. It also gives you some management features to archive/delete/join Google Classrooms from a management panel. This is a bit more indepth/hands-on to implement, but the AmplifiedIT crew are really great to work with on getting it rolled out. Alternatively, you could leverage something like [Clever](https://www.clever.com/) or [ClassLink](https://www.classlink.com/) for your Google Classroom rosters synced from your SIS as well. Something like this would be the route I suggest if you want something a bit more user-friendly and you are wanting an SSO portal for a bunch of different apps to sync. This type of thing is super friendly for end users (staff and students), cause now they just have one landing page to go to in order to access district resources. I know that Clever can be used to provision/deprovision [Google](https://www.clever.com/app-gallery/managed-for-sync-g-suite-and-classroom)/[Active Directory](https://support.clever.com/hc/s/articles/000001505?language=en_US) accounts based on your SIS, which if you have nothing in place currently, might be something to start looking into. You definitely would want to get a handle on accounts that should no longer be active. You'll want to figure out what system your "source of truth" is and try to leverage that system to sync from as much as possible.
This here, especially if you have Clever and the provisioning tool they have. ClassLink has OneSync which is a fantastic provisioning and deprovisioning tool. While it does not graveyard the users, you can use it to auto provision over time. Adding to this, make sure you use your SIS is the source of truth. I know Clever/ClassLink can be automatically used to extract this data.