HardenHygiene

Starter Account Setup

Builds the starter's account bundle from the approved role template on their first morning.

Part of Joiner, mover and leaver access

Tools

Okta, Jira Service Management, Slack

Outcomes

Access granted on day one • Every grant traced to a template • Manager told what was granted

Documentation

Instruction-ready detail below

When <in:jira>a starter's access request</in:jira> is approved, apply that role's app bundle in Okta, and <slack>confirm</slack> to the manager what was granted and what was left out.

Instruction file

When <in:jira>a starter's access request</in:jira> is approved, apply that role's app bundle in Okta, and <slack>confirm</slack> to the manager what was granted and what was left out.

Setup requirements

Tools

Okta, Jira Service Management, Slack

Trigger

When a new starter reaches their start date

Setup time

20 minutes

Other automations in this workflow

Leaver Access Revocation

Removes the sign-in, group membership and app grants on the leaver's last day and records the evidence.

Mover Device Handover

Wipes and re-enrols a device when someone changes role, so the previous owner's data does not travel with it.

Stale Account Sweep

Flags accounts with no sign-in for 45 days so a dormant contractor or old service account gets removed.

Related workflows

Access reviews

Works the periodic entitlement list so access nobody still needs is released, and every decision is written down.

Privileged access review

Confirms every standing admin grant is still needed, and turns one-off elevation into a recorded, time-boxed grant.

Audit trails

Joins the scattered administrative change records into one timeline, so an auditor's question is a search rather than a fortnight of exports.

Download

Start with one instruction file.

Download the app and begin with drafts and checklists before you write anything back.

  • •Plain-language instructions
  • •Runs on your machine
  • •Works with your existing setup
  • •Reviewable activity history
Download