HardenHygiene

Mover Device Handover

Wipes and re-enrols a device when someone changes role, so the previous owner's data does not travel with it.

Part of Joiner, mover and leaver access

Tools

Jamf, Microsoft Intune, Jira Service Management, Slack

Outcomes

Old profile removed within a day • Device re-enrolled to the new owner • Handover ticket closed with evidence

Documentation

Instruction-ready detail below

When <in:jira>a role change</in:jira> is approved, wipe the old Jamf profile, enrol the device to the new owner, and <slack>note</slack> the handover in the IT channel.

Instruction file

When <in:jira>a role change</in:jira> is approved, wipe the old Jamf profile, enrol the device to the new owner, and <slack>note</slack> the handover in the IT channel.

Setup requirements

Tools

Jamf, Microsoft Intune, Jira Service Management, Slack

Trigger

When an employee changes role

Setup time

30 minutes

Other automations in this workflow

Leaver Access Revocation

Removes the sign-in, group membership and app grants on the leaver's last day and records the evidence.

Stale Account Sweep

Flags accounts with no sign-in for 45 days so a dormant contractor or old service account gets removed.

Starter Account Setup

Builds the starter's account bundle from the approved role template on their first morning.

Related workflows

Access reviews

Works the periodic entitlement list so access nobody still needs is released, and every decision is written down.

Privileged access review

Confirms every standing admin grant is still needed, and turns one-off elevation into a recorded, time-boxed grant.

Audit trails

Joins the scattered administrative change records into one timeline, so an auditor's question is a search rather than a fortnight of exports.

Download

Start with one instruction file.

Download the app and begin with drafts and checklists before you write anything back.

  • •Plain-language instructions
  • •Runs on your machine
  • •Works with your existing setup
  • •Reviewable activity history
Download