Project 03 · Identity & Productivity
Joiner-Mover-Leaver Automation Pack
New hire on Monday, your IT does the rest. Same when someone leaves.
What's included
Fixed scope. Written deliverables.
Every line below is in the Statement of Work. We don't expand scope mid-project; we don't shrink it. If something needs to change, we agree it in writing.
- PowerShell + Power Automate workflow triggered by HR signal (new hire, role change, departure)
- Joiner: account created, licences assigned, security groups added, mailbox configured, welcome email sent
- Mover: groups updated based on new role, old access revoked
- Leaver: account disabled, mailbox archived, devices wiped, licences released, manager notified
- Documentation + handover walkthrough
Frequently asked
About this project specifically.
How does the HR signal trigger work?
Three options based on your HR system: (1) Direct integration if you use BambooHR, Employment Hero or Xero Payroll — events fire automatically. (2) Power Automate trigger from a SharePoint list or Forms response if you don't have an HR system. (3) Manual trigger via a one-click admin form. We pick the lightest option that fits your reality.
Can the leaver process be reversed if someone comes back?
Yes — within the retention window the workflow stores account state so a returning employee can be re-enabled in 5 minutes rather than recreating from scratch. Retention defaults to 90 days post-departure but is configurable.
Does this handle contractors / casuals differently to permanent staff?
Yes — we model 2-3 employment types in the workflow. Contractors typically get time-bound access (30/60/90 day expiry), casuals get a lighter security group set, permanents get the full set. We map this in week 1 of the project.
Other identity projects
Often paired with this one.
SaaS SSO via Entra ID
$1,800
Stop your team from juggling passwords. Single sign-on for the SaaS apps you actually use.
See projectConditional Access Baseline
$2,400
Eight policies that block 90% of credential attacks. Designed and deployed in three weeks.
See projectPassword Manager Rollout
$900 + licence
Stop using "Password123!" One vault, one master password, MFA everywhere.
See project Same-business-day email reply · no sales calls
Want a quote for Joiner-Mover-Leaver Automation Pack? It takes 2 minutes.
We'll email back with a tailored proposal — no calls, no follow-ups you didn't ask for.