# SOC2 CC6.2

URL: /systems/trust-and-governance/criteria/soc2/cc6-2 · Id: `criterion:soc2:CC6.2`

> The entity registers and authorizes new users before issuing credentials, and removes credentials once access is no longer authorized.

The entity registers and authorizes new users before issuing credentials, and removes credentials once access is no longer authorized.

| Property | Value |
| --- | --- |
| Framework | SOC2 |
| Reference | `CC6.2` |
| Satisfied by | [Permission decay](/systems/trust-and-governance/controls/permission-decay), [Permission widening](/systems/trust-and-governance/controls/permission-widening), [Unseated access](/systems/trust-and-governance/controls/unseated-access) |