IT OPS
Quarterly Stale Dropbox Access Revocation Runbook
Each quarter, identifies shared-folder members who have had no access activity past a threshold, and after Slack approval runs a shell-driven Dropbox API revocation.
How it runs
The automated pipeline, trigger to output.
- TriggerQuarterly schedule starts the runbook
- ActionList members with last-activity timestampsDropbox
- LogicSelect members past inactivity threshold
- OutputRequest batch revocation approval in SlackSlack
- ActionRevoke approved members via Dropbox APIShell
What it does
Finds dormant access: members who still hold rights to shared folders but have not opened or modified anything within the configured inactivity window. It compiles the stale-access list, requests one batch approval in Slack, and on approval executes the revocations through a shell step calling the Dropbox API, recording every removal as it goes.
When to use it
Use this for the recurring housekeeping pass that keeps shared-folder rosters lean. It closes the loop that audit-only workflows leave open by actually removing access once a human signs off, while keeping a clear record of what was revoked and why.
How it works
- 1A quarterly schedule starts the cleanup runbook.
- 2Dropbox returns folder members with their last-activity timestamps.
- 3A logic step selects members past the inactivity threshold.
- 4The candidate list is posted to Slack for a single batch approval.
- 5On approval, a shell step calls the Dropbox API to revoke each member.
- 6Each revocation is logged to the run output for the audit trail.
Set it up
What you configure once, before turning it on.
- 1Connect DropboxFiles and folders.
- 2Connect SlackChannels, DMs, threads, mentions.
- 3Connect ShellRun sandboxed commands inside the workspace.
- 4Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 5Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 6Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More IT Ops workflows
Outlook Room Conflict Resolver with Approval Gate in Teams
When an Outlook room clashes, proposes a rebooking and asks the bumped meeting's organizer to approve the move in Microsoft Teams before any change is made.
Outlook Room Double-Booking Resolver with Auto-Rebook
Detects when two meetings claim the same Outlook room resource and automatically relocates the lower-priority meeting to a comparable free room.
Self-Service Reclaim Email for Idle Users
Detects users idle in a SaaS app past the threshold and emails each one a keep-or-release link; unanswered seats after the deadline are auto-flagged for removal.
Reconcile SSO logins against expense spend to find unmanaged tools
Joins SSO usage data with expense/payment records in Snowflake to surface tools that are being used but not paid for, or paid for but never logged.
Indoor Air Quality Breach to Tenant Notice and Work Order
Listens for CO2, VOC, or humidity sensor alerts via webhook, and when a zone exceeds occupant-safety limits it emails affected tenants, opens a Monday remediation task.
Daily Building Anomaly Digest to MS Teams
Each morning queries BigQuery for the prior day's flagged sensor anomalies, summarizes them by site and system into a ranked briefing.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.