Start free trial

Features

Everything on one person record

Accounts, devices, licenses, and lifecycle evidence for companies up to 60 people. Microsoft Graph and Google Admin SDK handle directory work; OpsDesk keeps the record and the log.

  • Joiner onboarding

    Start with a draft person record, then run onboarding. OpsDesk provisions Microsoft 365 accounts through Microsoft Graph and Google Workspace accounts through the Admin SDK. Temporary passwords display once when onboarding completes.

  • Mover reconciliation

    A role change updates structured role, manager email, device assignments, and license seats on the person record. OpsDesk applies those changes back to Microsoft 365 via Graph or Google Workspace via the Admin SDK.

  • Leaver offboarding

    One offboard action deactivates provider accounts, revokes access, and sets status to left. You do not run a separate checklist in the Entra admin center.

  • People directory

    Every employee moves through draft, onboarding, active, offboarding, and left. Built for companies up to 60 people without a dedicated IT person.

  • Devices and license seats

    Assign laptops and M365 or Google license pools per person. Assets sit on the same record as directory accounts, role data, and manager email.

  • Tickets and requests

    Track IT requests with priority, SLA, and assignee on the Tickets screen. Open tickets surface on the dashboard alongside people, devices, and license counts.

  • Per-person activity log

    Joiner, mover, and leaver actions record actor email, outcome, and timestamp on the person detail page and the tenant activity log. Export for ISO 27001:2022 A.5.16 and A.5.18 access-rights reviews.

  • CSV import

    On the Team plan, bulk-import people records from CSV. Imported rows start as draft and enter the same lifecycle as manually added people.

  • Role provisioning templates

    Team plan templates map a structured role to default license seats and device assignments. A joiner or mover run applies the template before directory sync.

  • Spot Suite OIDC sign-in

    Operators sign in through Spot Suite OIDC with Microsoft Entra ID, passkeys, or authenticator-app MFA. End users never sign in to OpsDesk. Graph and Google connections use separate admin consent.

Operate

From access grant to recorded evidence

Three moves, one record. Connect a directory once, run the lifecycle, and read back who did what.

  1. Connect provider access

    Grant Microsoft Graph admin consent on your Entra tenant, or configure Google Workspace domain-wide delegation. OpsDesk only reads and writes the directories you connect — one directory on Team, both on Business.

  2. Run joiner, mover, and leaver work

    Create a draft, run onboarding to provision accounts, update role and assets when someone moves teams, and offboard when they leave. Temporary passwords show once at the end of onboarding.

  3. Review the evidence

    Open the person detail page or tenant activity log. Each action shows who ran it, whether it succeeded, and when — ready for an access review or auditor export.

Run your first joiner flow

30-day trial, no credit card, up to 60 people, one connected directory.

Get started Book a demo