Start free trial

Lifecycle

Draft through left on one record

Every person moves through five statuses: draft, onboarding, active, offboarding, and left. Joiner, mover, and leaver actions change status, sync directories, and write to the activity log.

Joiner

Onboard with accounts provisioned

Create the person record, then provision Microsoft 365 and Google Workspace accounts.

  • Record Draft person with role, manager, assets
  • Microsoft 365 Graph creates user, assigns licenses
  • Google Workspace Admin SDK creates user, assigns licenses
  • Password Temporary password shown once at completion
  • Status draft → onboarding → active
  • Activity log Actor email, outcome, timestamp per step

Mover

Reconcile a role change everywhere

A role change updates the record and pushes to the connected directories.

  • Updates Role, manager email, devices, license seats
  • Microsoft 365 Graph updates user attributes and licenses
  • Google Workspace Admin SDK updates org unit and licenses
  • Assets Device and seat assignments on same record
  • Status Stays active through the mover run
  • Activity log Actor email, outcome, timestamp on apply

Leaver

Offboard in one action

Deactivate accounts and revoke access without a separate Entra checklist.

  • Microsoft 365 Graph disables account and revokes sessions
  • Google Workspace Admin SDK suspends or deletes user
  • Access Provider accounts deactivated in one action
  • Assets License seats and devices unassigned
  • Status active → offboarding → left
  • Activity log Actor email, outcome, timestamp on offboard

Under the hood

What one offboard action does

A single Leaver action fans out across directories, devices, and the audit log.

  1. Start offboard

    Operator selects the active person and runs a single leaver action. Status moves to offboarding.

  2. Deactivate directory accounts

    OpsDesk calls Microsoft Graph or the Google Admin SDK to disable the provider account and revoke active sessions.

  3. Release assets

    Assigned laptops and M365 or Google license seats are cleared from the person record.

  4. Record evidence

    The activity log stores actor email, success or failure, and timestamp. Status becomes left.

Connect a directory and run a joiner

30-day trial with full joiner, mover, and leaver flows. No credit card.

Get started Book a demo