An agent that works the access requests and the offboarding checklist, and asks before it grants anything.
The problem
An access request means checking who is asking, what role they hold, whether their manager approved it and whether the access fits policy. An offboarding means finding every account a person had and closing each one. Both are checklists, and both are usually worked by hand from a ticket.
A missed step costs more than the time it saves: an account left open after someone leaves, or access nobody approved. An agent can run the checklist against the records every time and show a person exactly what it would change before it changes it.
What the agent does
- Reads an access request, checks the requester’s role and manager approval against the access policy, and says whether it fits
- Prepares the change for an approved request and asks the IT owner before it grants anything
- Builds the offboarding checklist from every account and device the person holds, and tracks each item to done
- Asks before it disables an account, removes access or reassigns a device, and records what it changed on the ticket
Systems it works in
- Identity provider: users, groups and role assignments
- Ticketing system: access requests and their approvals
- HR system: start dates, role changes and leave dates
- Device inventory: laptops and phones and who holds them
How it is measured
- Agent-to-human ratio: how many requests and checklists the agent prepared, and how much IT still did by hand
- Quality: how often the IT owner approved the agent’s proposed change as written
- Coverage: the share of offboardings where every account on record was found and closed
No demo is recorded for this work. The recorded demos show the same agent on revenue and customer success work, asking before it changes anything.