Onboarding & Access

16 skills in this category.

Access Request Handling

Work a request for access to a folder, calendar, distribution list, or shared mailbox — approval checked, least privilege applied, expiry set on anything temporary. Use when a ticket asks to "give <user> access to" a resource.

Bulk Onboarding Coordinator

Coordinate a multi-hire onboarding wave — one parent ticket, a child ticket per hire, and a consolidated status table kept current. Use when a client sends several new starters at once (seasonal wave, acquisition, new office, intern class).

Conditional Access Exception

Exclude a user, app, or location from a conditional-access policy with a written risk note, approval, expiry, and revert plan. Use when a ticket asks to bypass, exclude from, or "make an exception to" a sign-in or CA policy.

Distribution List Management

Add or remove distribution-list members with owner approval and a documented reason. Use when a ticket asks to add someone to, remove someone from, or clean up a distribution list or email group.

Employee Offboarding

Securely disable a departing employee in the right order — sign-in and sessions first, mailbox before licenses — and reclaim access and assets. Use when a ticket asks to offboard, terminate, disable, or "remove access for" a user.

Entra User Lifecycle (Zapier)

Create, update, or disable Microsoft Entra ID users through the Zapier connector — identity resolved from the PSA/ticket first (Entra has no search), approval gated before every write. Use when an onboarding/offboarding/update ticket should execute directly against Entra via Zapier.

Group Membership Request

Handle a security-group membership change — state what the group actually grants, get the right approver, set a review date. Use when a ticket asks to add or remove someone from a security group or role group.

Laptop Return Logistics

Get a company device back from a departing or remote user — coordinate the return box and prepaid label, send the templated return email with a deadline, confirm receipt, verify the wipe, update the asset record, then close. Includes the escalation path when the user goes silent.

License Lifecycle

Assign or reclaim software licenses — check for unused licenses before buying, and leave a billing note on every change. Use when a ticket asks to add a license, free one up, or asks why the client is paying for seats.

Litigation Hold

Place or manage a legal hold on a user's mailbox and data — scope confirmed by an authorized requester, no user notification unless counsel approves. Use when a ticket asks for a litigation hold, legal hold, or data preservation for a legal matter.

New Hire Onboarding

Run a new-employee onboarding request end to end — role-based accounts, licenses, groups, hardware, and MFA against the client's own checklist. Use when a ticket asks to set up, onboard, provision, or "create accounts for" a new starter.

Offboarding Completeness Audit

Post-offboarding sweep for anything missed — licenses still assigned, live delegations, unreturned devices, lingering MFA methods and sessions, external shares. Use after an offboarding closes, or on a periodic sweep of recent departures.

Password & MFA Recovery

Reset a password or recover MFA with the identity-verification ladder, a locked-vs-disabled check, and secure credential delivery. Use when a user is locked out, forgot a password, or lost/replaced their authenticator device.

Rehire Reactivation

Safely restore a disabled account for a returning employee — authorization verified, old group memberships reviewed against the new role, credentials reset fresh. Use when a ticket asks to re-enable, reactivate, or restore a former employee's account.

Shared Mailbox Delegation

Set up or change shared-mailbox access — Full Access, Send As, or Send on Behalf — with owner approval and an audit note. Use when a ticket asks to add someone to a shared mailbox or let them send from another address.

Travel Access Window

Open a temporary conditional-access exception for a traveling user with an automatic expiry and a tracked revert task. Use when a ticket says a user is traveling and will be blocked by location or device sign-in policies.