​
Overview

The People page is your organization’s employee directory within LowerPlane. It provides a comprehensive view of every person in your organization, including their employment details, security clearance, group memberships, system access, training records, and pending compliance tasks.

​
People Directory

The people directory displays all employee records in a searchable, filterable table. Each row shows:
  • Name and email — employee identity
  • Job title and department — organizational placement
  • Status — current employment status (active, on leave, terminated, etc.)
  • Start date — when the employee joined the organization
  • Groups — security groups the employee belongs to
  • Security roles — assigned security roles

​
HR Integration Sync

The primary way to populate your people directory is through HR integration sync. LowerPlane supports 61+ HR and identity providers through a unified API.
1

Connect Your HR Provider

Navigate to Integrations > HR Integrations and select your provider (BambooHR, Workday, Okta, Google Workspace, etc.). Complete the OAuth authorization flow or enter API credentials.
2

Initial Sync

Once connected, LowerPlane performs an initial sync that imports all active employees. This typically completes within a few minutes, depending on your organization size.
3

Ongoing Sync

After the initial import, the integration syncs on a scheduled basis. New hires are automatically added, terminated employees are updated, and changes to job titles, departments, and managers are reflected.
Synced fields include name, email, job title, department, employment type, status, start date, manager, and location. LowerPlane does not sync sensitive HR data like salary or performance reviews.

​
Manual People Management

If you do not use an HR integration or need to add people not in your HR system (contractors, consultants, board members), you can manage records manually.

​
Adding a Person

Click Add Person to create a new employee record. Required fields:
FieldRequiredDescription
First NameYesEmployee’s first name
Last NameYesEmployee’s last name
EmailYesWork email address
Job TitleNoCurrent position
DepartmentNoOrganizational department
Employment TypeNoFull-time, part-time, contractor
StatusYesEmployment status
Start DateNoWhen the employee started
LocationNoWork location

​
Bulk CSV Import

For organizations without an HR integration, LowerPlane supports bulk import via CSV file. Prepare a CSV with the required columns and upload it through the import dialog.
Download the CSV template from the import dialog to ensure your file has the correct column headers and formatting.

​
Person Detail View

Clicking on a person in the directory opens their detail page, which provides a comprehensive view across multiple sections:
Core employment details: name, email, phone, job title, department, employment type, status, start date, manager, and location.
Security clearance level, background check date, and background check status. These fields support personnel security controls in ISO 27001 and SOC 2.
Security groups and roles assigned to the person. Groups control access to systems and data, while security roles define permissions within LowerPlane.
A record of what systems the person has access to, including access level, grant date, and last activity. This data feeds into access review campaigns.
Training courses assigned to the person, completion status, scores, and dates. Overdue training is highlighted for follow-up.
Outstanding compliance tasks assigned to the person, such as policy acknowledgments, training deadlines, or access review certifications.

​
People Statuses

LowerPlane models every person with one of these statuses:
StatusBadgeDescription
ActiveGreenCurrently employed and active
On LeaveYellowTemporarily away from work
TerminatedRedEmployment has ended
SuspendedOrangeAccess temporarily suspended
FormerGrayPreviously employed
InactiveGrayNot currently active
Not a PersonPurpleService account or system entry — excluded from compliance
AliasGraySecondary account for the same person — excluded from compliance
Not in ScopeGrayExplicitly excluded from compliance scope

​
How Status Changes During Sync

Each HR or identity provider uses its own vocabulary for lifecycle state (Okta DEPROVISIONED, Google Workspace SUSPENDED, BambooHR Terminated, etc.). During sync, LowerPlane normalizes those raw values into the statuses above so every downstream check — access reviews, offboarding tests, digests — evaluates the same way regardless of source.
Records are matched by lowercase email. A new email creates a new person; an existing email is upserted (updated in place). Sync never deletes people — terminated employees are marked, not removed, so historical evidence and access-review trails stay intact.
Manual classifications are retained. If you set a person’s status to Not a Person, Alias, or Not in Scope, sync will never overwrite it — those are admin-only classifications used to exclude service accounts, secondary accounts, and out-of-scope records from compliance metrics. All other statuses (Active, On Leave, Terminated, Suspended, Former, Inactive) will be updated from the connected HR or identity provider on the next sync.

​
Provider → LowerPlane Status Mapping

The mapping is applied to every person on every sync run:
Provider raw valueLowerPlane statusNotes
active, ACTIVE, Active, enabledActiveStandard active employee
suspended, SUSPENDED, LOCKED_OUTSuspendedAccess frozen but employment continues
deprovisioned, DEPROVISIONED, deleted, DeletedTerminatedProvider considers the account offboarded
provisioned, PROVISIONED, staged, STAGEDActiveOkta-style pending accounts that have not yet activated. Treated as active so they appear on the roster — admins can reclassify manually.
RECOVERY, PASSWORD_EXPIREDActiveRecoverable auth state, not a lifecycle change
on_leave, terminated, former, inactive, not_a_personpassed through unchangedAlready a valid LowerPlane status
(empty or unrecognized value)ActiveSafe default — ensures the person still shows in the directory

​
Identity Provider Specifics

HR and identity providers each contribute slightly different signals:
Uses ACTIVE, PROVISIONED, STAGED, SUSPENDED, LOCKED_OUT, DEPROVISIONED, RECOVERY, PASSWORD_EXPIRED. DEPROVISIONED becomes Terminated; SUSPENDED/LOCKED_OUT become Suspended; other transient states default to Active.
Uses active, suspended, deleted (deleted users are usually filtered out at the API level). suspended becomes Suspended; active stays Active. Terminated employees typically arrive as deleted or drop off the roster entirely.
Uses enabled/disabled. disabled accounts are mapped to Terminated via the deleted alias when the provider marks them as offboarded, otherwise disabled from the account object surfaces as Suspended.
Send an explicit employment status. Terminated/Offboarded values map to Terminated; On Leave maps to On Leave; the rest are treated as Active. The employment end_date is preserved separately for reporting.

​
What Happens Downstream

Once a status changes on sync, several things follow automatically:
  • Offboarding checks — Any person with status terminated, former, inactive, suspended, or offboarded is flagged as “no longer entitled to access.” Repository and cloud-access tests use this to detect lingering access for ex-employees (see Access Reviews).
  • Digest and notification suppression — Non-active people stop receiving policy acknowledgment reminders and security training assignments.
  • Compliance scoping — not_a_person, alias, and not_in_scope are excluded from denominator counts (training completion, MFA coverage, etc.), preventing service accounts from skewing your metrics.
  • Manager linking — On every sync a second pass resolves reporting-manager relationships by email, so re-org changes flow through as soon as the HR provider reflects them.
Statuses only downgrade to Terminated or Suspended when the provider reports them that way. If you offboard someone in your HR tool but the sync has not yet run, LowerPlane will still show them as active. Run a manual sync from Integrations after critical offboarding events, or set the status manually in the person’s detail view.
If a person appears with an unexpected Active status after termination, check the raw provider value in Integrations > Sync History. Unknown provider values default to Active by design — surface them to us so we can extend the mapping.
The people table supports:
  • Text search — search by name, email, job title, or department
  • Status filter — filter by employment status
  • Department filter — filter by organizational department
  • Group filter — show only members of a specific group
  • Pagination — navigate through large directories with configurable page sizes

​
Exporting People Data

Export your people directory to CSV for reporting, auditing, or offline analysis. The export includes all visible columns and respects any active filters.
Exported data may contain personal information. Handle exports according to your organization’s data handling and privacy policies.

​
Compliance Relevance

The people directory supports multiple compliance controls:
FrameworkRelevance
ISO 27001A.6.1 (Organization of Information Security), A.7 (Human Resource Security)
SOC 2CC1.4 (Board and Management Oversight), CC6.2 (Access Controls)
HIPAA164.308(a)(3) (Workforce Security)
GDPRArticle 32 (Security of Processing)
PCI-DSSRequirement 7 (Restrict Access), Requirement 12 (Security Policies)

​
Best Practices

  • Connect your HR integration as the first step — it eliminates manual data entry and keeps records current
  • Set the correct status for all employees, especially terminated and suspended users
  • Use “Not a Person” for service accounts to keep compliance metrics accurate
  • Review the directory monthly to catch any sync issues or stale records
  • Maintain background check records for roles with access to sensitive data