An employee who is serving their notice period is still an employee. Unless you mean truly ex-employees who still have access, in which case the company has a big problem if it cannot revoke credentials.