HardenHygiene

Stale Account Sweep

Flags accounts with no sign-in for 45 days so a dormant contractor or old service account gets removed.

Part of Joiner, mover and leaver access

Tools

Microsoft Entra ID, Vanta, Slack

Outcomes

Dormant accounts listed by owner • Owner asked to confirm or remove • Removals tracked to closure

Documentation

Instruction-ready detail below

<in:schedule>Every Monday at 7am</in:schedule>, list accounts with no sign-in for 45 days, then <spreadsheets>record</spreadsheets> the owner and last activity for the access queue.

Instruction file

<in:schedule>Every Monday at 7am</in:schedule>, list accounts with no sign-in for 45 days, then <spreadsheets>record</spreadsheets> the owner and last activity for the access queue.

Setup requirements

Tools

Microsoft Entra ID, Vanta, Slack

Trigger

Every Monday at 7:00am

Setup time

20 minutes

Other automations in this workflow

Leaver Access Revocation

Removes the sign-in, group membership and app grants on the leaver's last day and records the evidence.

Mover Device Handover

Wipes and re-enrols a device when someone changes role, so the previous owner's data does not travel with it.

Starter Account Setup

Builds the starter's account bundle from the approved role template on their first morning.

Related workflows

Access reviews

Works the periodic entitlement list so access nobody still needs is released, and every decision is written down.

Privileged access review

Confirms every standing admin grant is still needed, and turns one-off elevation into a recorded, time-boxed grant.

Audit trails

Joins the scattered administrative change records into one timeline, so an auditor's question is a search rather than a fortnight of exports.

Download

Start with one instruction file.

Download the app and begin with drafts and checklists before you write anything back.

  • •Plain-language instructions
  • •Runs on your machine
  • •Works with your existing setup
  • •Reviewable activity history
Download