Every employee has a collection. When employee needs access to something, we add that password to their collection.

When they leave the company, we revoke access to Bitwarden and then change all passwords in their collection.

For small companies of maybe up to 100 employees, this is a super cheap and practical solution.