If you are asked to deactivate an Employee please just untick the Active box and advise the user that resetting the passkey could be a good idea.
There is no need for the Employee permissions to be cleared for deactivated Employees. We found today that removing their profile from all the modules isn't a good idea as fields where their name was previously populated will now be blank.