There is a range between kicking them out instantly and allowing them to do whatever they please. Authorizations to important systems should be immediately revoked but you can allow them some time to gather their things, access to internal chat to say their goodbyes etc. Or is that an excuse for poorly designed internal controls?