IT OPS

Reconcile shared-mailbox access against the department roster nightly

Runs nightly to compare each department's Outlook shared-mailbox access list against the authoritative roster in Monday, then adds missing members, removes departed ones.

CategoryIT Ops
Enginesim
Difficultyadvanced
Triggerschedule
Steps6
Setup~25 min

How it runs

The automated pipeline, trigger to output.

  • TriggerNightly schedule fires
  • ActionPull current mailbox access grants from Exchange OnlineShell
  • ActionRead authoritative department roster from Mondaymonday.com
  • LogicCompute members to add and stale grants to revoke
  • ActionApply add/remove access changes in OutlookOutlook
  • OutputPost per-mailbox drift summary to TeamsMicrosoft Teams

What it does

Keeps shared-mailbox permissions honest by reconciling who actually has access in Outlook against who should have access according to the department roster, every night.

When to use it

Use this once departments are live and people join or leave. Manual access edits drift over time, leaving former employees with mailbox access. This closes that gap automatically and gives IT an audit trail.

How it works

  1. 1A nightly schedule kicks off the reconciliation run.
  2. 2A shell step pulls the current FullAccess and SendAs grants for each shared mailbox from Exchange Online.
  3. 3A Monday action reads the authoritative member list for each matching department.
  4. 4A logic step computes the difference: members to add and stale grants to revoke.
  5. 5An Outlook step applies the additions and removals to bring each mailbox into compliance.
  6. 6A final Teams message posts a per-mailbox drift summary to the IT Operations channel for the audit record.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect ShellRun sandboxed commands inside the workspace.
  2. 2
    Connect monday.comVisual work management for teams.
  3. 3
    Connect OutlookMail, calendar, contacts.
  4. 4
    Connect Microsoft TeamsChannels, chats, files.
  5. 5
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  6. 6
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  7. 7
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.