IT OPS
On-demand access revoke from a Slack command
An IT admin types an offboarding command in Slack with an employee email, and the workflow revokes GitHub and Google Drive access.
How it runs
The automated pipeline, trigger to output.
- TriggerSlack offboarding command invokedSlack
- LogicValidate requester is an IT admin
- ActionRevoke GitHub org accessGitHub
- ActionArchive Google Drive filesGoogle Drive
- ActionLog run to Notion audit pageNotion
- OutputReply in Slack thread with confirmationSlack
What it does
Gives IT a one-line offboarding button inside Slack. When an admin invokes the command with a departing employee's email, the workflow immediately strips GitHub and Google Drive access and confirms the result back in the same Slack thread.
When to use it
Use it for ad-hoc or urgent departures where waiting for the HRIS sync is too slow, such as a security-sensitive exit. The operator stays in Slack and gets instant confirmation with a link to the audit log.
How it works
- 1An admin runs the offboarding slash command in Slack with the target email.
- 2A logic step validates the requester is an authorized IT admin before proceeding.
- 3GitHub removes the user from org teams and revokes their seat.
- 4Google Drive transfers their owned files to a shared archive folder.
- 5The run is recorded to a Notion audit page for evidence.
- 6The workflow replies in the Slack thread with a success summary and a link to the audit entry.
Set it up
What you configure once, before turning it on.
- 1Connect SlackChannels, DMs, threads, mentions.
- 2Connect GitHubRepos, issues, pull requests, actions.
- 3Connect Google DriveDocs, sheets, slides, files.
- 4Connect NotionPages, databases, comments.
- 5Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 6Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 7Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More IT Ops workflows
Recurring Sensor Fault Root-Cause Investigator
On a schedule, an agent reviews recent Monday work orders and BigQuery telemetry to identify equipment with repeating faults, drafts a root-cause hypothesis with a recommended fix.
Daily Building Anomaly Digest to MS Teams
Each morning queries BigQuery for the prior day's flagged sensor anomalies, summarizes them by site and system into a ranked briefing.
Agentic Inactive-Seat Reclamation Review
An agent investigates each idle SaaS seat by correlating SSO login gaps with HR status and ticket history, classifies it as reclaim, hold, or escalate, and drafts a reasoned…
Reconcile SSO logins against expense spend to find unmanaged tools
Joins SSO usage data with expense/payment records in Snowflake to surface tools that are being used but not paid for, or paid for but never logged.
Approved-Seat Deprovision Execution
Fires when an IT approver confirms a seat for removal, then executes deprovisioning via the IdP API and logs the action to an audit table and a Linear cleanup ticket.
HVAC Anomaly Detection to Severity-Routed Work Orders
Ingests building HVAC telemetry via webhook, flags out-of-band temperature, pressure, or runtime readings.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.