IT OPS
Day-One SaaS Access Bundle from HR Webhook
When HR marks a new hire as starting, this provisions their core SaaS accounts (email, chat, file storage) based on their department and posts a checklist to the IT channel.
How it runs
The automated pipeline, trigger to output.
- TriggerHRIS new-hire webhook receivedHTTP webhook
- LogicMap department to access bundle
- ActionCreate home folder + grant drive accessGoogle Drive
- ActionAdd user to org and department teamMicrosoft Teams
- OutputPost provisioning checklist to #it-onboardingSlack
What it does
Turns a single new-hire event from your HRIS into a fully provisioned day-one access bundle. It reads the hire's department and role, decides which apps they need, creates accounts in each, and reports back so IT can confirm before the start date.
When to use it
Use this when new employees join often enough that manual account creation is error-prone or slow. It guarantees every hire gets the same baseline access (mailbox, chat workspace, shared drive) without an IT ticket per app.
How it works
- 1The HRIS fires a webhook the moment a new hire record is created with a confirmed start date.
- 2A logic step maps the department field (Sales, Engineering, Finance) to the correct group memberships and folder access.
- 3A Google Drive action creates the user's home folder and grants department-shared-drive access.
- 4A Microsoft Teams action adds them to the org and their department's team.
- 5A final Slack message posts a per-app provisioning checklist to #it-onboarding, tagging the assigned IT owner for sign-off.
Set it up
What you configure once, before turning it on.
- 1Connect HTTP webhookTrigger any URL on agent actions.
- 2Connect Google DriveDocs, sheets, slides, files.
- 3Connect Microsoft TeamsChannels, chats, files.
- 4Connect SlackChannels, DMs, threads, mentions.
- 5Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 6Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 7Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More IT Ops workflows
Recurring Sensor Fault Root-Cause Investigator
On a schedule, an agent reviews recent Monday work orders and BigQuery telemetry to identify equipment with repeating faults, drafts a root-cause hypothesis with a recommended fix.
Daily Building Anomaly Digest to MS Teams
Each morning queries BigQuery for the prior day's flagged sensor anomalies, summarizes them by site and system into a ranked briefing.
Agentic Inactive-Seat Reclamation Review
An agent investigates each idle SaaS seat by correlating SSO login gaps with HR status and ticket history, classifies it as reclaim, hold, or escalate, and drafts a reasoned…
Reconcile SSO logins against expense spend to find unmanaged tools
Joins SSO usage data with expense/payment records in Snowflake to surface tools that are being used but not paid for, or paid for but never logged.
Approved-Seat Deprovision Execution
Fires when an IT approver confirms a seat for removal, then executes deprovisioning via the IdP API and logs the action to an audit table and a Linear cleanup ticket.
HVAC Anomaly Detection to Severity-Routed Work Orders
Ingests building HVAC telemetry via webhook, flags out-of-band temperature, pressure, or runtime readings.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.