IT OPS
Offboarding-Triggered SaaS Seat Revocation Queue
When an HR webhook marks an employee as departed, instantly enumerates all their SaaS seats and opens a single consolidated deprovision approval with a Slack approve/deny prompt…
How it runs
The automated pipeline, trigger to output.
- TriggerHR webhook fires on employee departureHTTP webhook
- ActionLook up all SaaS seats for the user in PostgresPostgres
- LogicStop if no seats found, else continue
- ActionCreate consolidated deprovision approval on Mondaymonday.com
- ActionSend approve/deny prompt to IT Slack channelSlack
- OutputOn approval, mark seats revoked in PostgresPostgres
What it does
The moment HR fires a termination event, this workflow gathers every SaaS seat tied to the departing employee, bundles them into one consolidated deprovision approval, and drops an approve/deny prompt into the IT Slack channel. No more chasing scattered license cancellations days after someone leaves.
When to use it
Use it to close the offboarding gap, the days between a departure and the actual seat cleanup, where you keep paying for and exposing access on accounts that should be gone. Ideal when HR already emits a departure webhook.
How it works
- 1An HR webhook fires with the departing employee's identifier.
- 2Look up all SaaS seats and entitlements for that user in Postgres.
- 3Branch: if zero seats found, post a no-op note and stop.
- 4Create one consolidated deprovision approval record on the Monday board.
- 5Send an interactive approve/deny prompt to the IT Slack channel listing every seat and its monthly cost.
- 6On approval, mark the seats revoked in Postgres and confirm in the thread.
Set it up
What you configure once, before turning it on.
- 1Connect HTTP webhookTrigger any URL on agent actions.
- 2Connect PostgresAny Postgres URL — query, write, migrate.
- 3Connect monday.comVisual work management for teams.
- 4Connect SlackChannels, DMs, threads, mentions.
- 5Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 6Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 7Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More IT Ops workflows
Recurring Sensor Fault Root-Cause Investigator
On a schedule, an agent reviews recent Monday work orders and BigQuery telemetry to identify equipment with repeating faults, drafts a root-cause hypothesis with a recommended fix.
Daily Building Anomaly Digest to MS Teams
Each morning queries BigQuery for the prior day's flagged sensor anomalies, summarizes them by site and system into a ranked briefing.
Agentic Inactive-Seat Reclamation Review
An agent investigates each idle SaaS seat by correlating SSO login gaps with HR status and ticket history, classifies it as reclaim, hold, or escalate, and drafts a reasoned…
Reconcile SSO logins against expense spend to find unmanaged tools
Joins SSO usage data with expense/payment records in Snowflake to surface tools that are being used but not paid for, or paid for but never logged.
Approved-Seat Deprovision Execution
Fires when an IT approver confirms a seat for removal, then executes deprovisioning via the IdP API and logs the action to an audit table and a Linear cleanup ticket.
HVAC Anomaly Detection to Severity-Routed Work Orders
Ingests building HVAC telemetry via webhook, flags out-of-band temperature, pressure, or runtime readings.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.