HR & RECRUITING
Access-grant approval routing for new-hire systems
When a new hire needs system access, routes each requested app to its system owner for approval and only creates the provisioning tickets for the ones that are approved.
How it runs
The automated pipeline, trigger to output.
- TriggerAccess request submitted via webhookHTTP webhook
- LogicExpand into one approval per system by role map
- ActionSend Slack approval to each system ownerSlack
- LogicSplit approved from denied responses
- OutputOpen Monday provisioning items for approved accessmonday.com
What it does
Handles the access half of onboarding with a real approval step. Instead of granting everything by default, it asks each system owner to approve or deny their app for the new hire, then provisions only what cleared.
When to use it
Use this when SOC 2 or least-privilege rules mean access needs an owner's sign-off. It fits regulated teams who cannot auto-grant CRM, finance, or production tooling to every new employee.
How it works
- 1A webhook fires when a new-hire access request is submitted from your intake form.
- 2The flow expands the request into one approval per requested system using a role-to-access map.
- 3It sends each system owner an interactive Slack approval message with approve and deny buttons.
- 4Logic collects the responses and splits approved from denied requests.
- 5For approved systems it opens a Monday provisioning item assigned to the owner; for denied ones it notifies the hiring manager with the reason.
Set it up
What you configure once, before turning it on.
- 1Connect HTTP webhookTrigger any URL on agent actions.
- 2Connect SlackChannels, DMs, threads, mentions.
- 3Connect monday.comVisual work management for teams.
- 4Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 5Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 6Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More HR & Recruiting workflows
Assemble and send the debrief packet after the final interview
Triggered when a candidate's final interview ends on the calendar, it waits a short window for scorecards, compiles the aggregated packet to Google Drive.
New-Hire Credential Intake to Renewal Calendar Holds
When a new credential is added to the tracker, it validates the record, files the document.
Credential Renewal Evidence Verification Agent
When an employee replies with a renewed credential document, an agent reads the attachment, extracts the new expiry date and credential number.
Escalate Compliance-Blocking Credential Lapses to Managers
Each day it finds credentials that have already expired or expire within 48 hours and are flagged compliance-blocking.
Day-one readiness orchestrator across all onboarding owners
An agent-driven coordinator that, when a hire is launched, plans the full provisioning program across IT, Facilities, and Finance, opens the work in your tracker.
Loom intake to req-tracker row in Airtable
Transcribes a hiring manager's Loom intake, scores the brief for completeness, and either logs a ready req in Airtable or routes incomplete intakes to a follow-up Slack ping.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.