IT OPS
Offboarding SaaS Seat Reclaim Sweep with Cost Report
When HR marks an employee as departed, sweep every connected SaaS tool, revoke the person's seats.
How it runs
The automated pipeline, trigger to output.
- TriggerHRIS posts departed employee (email, department)HTTP webhook
- ActionQuery SaaS asset inventory for accounts tied to emailPostgres
- ActionRevoke GitHub org membership and outside-collaborator accessGitHub
- LogicTally freed seats against per-seat monthly cost
- OutputPost reclaim report (seats freed, cost recovered) to IT-ops channelSlack
What it does
Turns a single "employee departed" signal into a full deprovisioning pass. It looks up every SaaS account tied to the leaver's work email, revokes or downgrades each seat, and rolls the result into one reclaim report that quantifies the licenses freed and the recurring spend recovered.
When to use it
Run this when an employee's last day arrives and you need provable, same-day removal of their access across the tool stack — plus a clean number for finance showing what the offboarding saved.
How it works
- 1A POST from your HRIS (or a manual run) fires with the leaver's email and department.
- 2A Postgres query pulls every SaaS account row mapped to that email from your asset inventory.
- 3For each tool that exposes seat management, the flow revokes membership (Slack, GitHub) or marks the seat for reclaim.
- 4A logic step tallies freed seats against their per-seat monthly cost from the inventory.
- 5The reclaim report — tools touched, seats freed, dollars recovered — is posted to the IT-ops Slack channel for sign-off.
Set it up
What you configure once, before turning it on.
- 1Connect PostgresAny Postgres URL — query, write, migrate.
- 2Connect SlackChannels, DMs, threads, mentions.
- 3Connect GitHubRepos, issues, pull requests, actions.
- 4Connect HTTP webhookTrigger any URL on agent actions.
- 5Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 6Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 7Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More IT Ops workflows
Recurring Sensor Fault Root-Cause Investigator
On a schedule, an agent reviews recent Monday work orders and BigQuery telemetry to identify equipment with repeating faults, drafts a root-cause hypothesis with a recommended fix.
Daily Building Anomaly Digest to MS Teams
Each morning queries BigQuery for the prior day's flagged sensor anomalies, summarizes them by site and system into a ranked briefing.
Agentic Inactive-Seat Reclamation Review
An agent investigates each idle SaaS seat by correlating SSO login gaps with HR status and ticket history, classifies it as reclaim, hold, or escalate, and drafts a reasoned…
Reconcile SSO logins against expense spend to find unmanaged tools
Joins SSO usage data with expense/payment records in Snowflake to surface tools that are being used but not paid for, or paid for but never logged.
Approved-Seat Deprovision Execution
Fires when an IT approver confirms a seat for removal, then executes deprovisioning via the IdP API and logs the action to an audit table and a Linear cleanup ticket.
HVAC Anomaly Detection to Severity-Routed Work Orders
Ingests building HVAC telemetry via webhook, flags out-of-band temperature, pressure, or runtime readings.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.