Onboarding & Access - Thread Docs

Employee lifecycle work for your clients — new starters, leavers, and the access changes in between.

Access Request Handling

Work an access request for a folder, calendar, DL, or shared mailbox with approval checked, least privilege applied, and expiry on temporary grants.

Bulk Onboarding Coordinator

Coordinate a multi-hire onboarding wave with one parent ticket, child ticket per hire, and a consolidated status table kept current through cutover.

Conditional Access Exception

Exclude a user, app, or location from a conditional access policy with written risk note, approval, expiry date, and revert plan documented up front.

Distribution List Management

Add or remove distribution list members with owner approval and a documented reason logged on the ticket, keeping email groups clean and auditable.

Employee Offboarding

Securely disable a departing employee in the right order: sign-in and sessions first, mailbox before licenses, then reclaim access, assets, and MFA.

Entra User Lifecycle (Zapier)

Create, update, or disable Microsoft Entra ID users through the Zapier connector with identity resolved from the PSA and approval gated on every write.

Group Membership Request

Handle a security group membership change by stating what the group actually grants, getting the right approver, and setting a review date on the change.

Laptop Return Logistics

Get a company laptop back from a departing or remote user with prepaid return label, templated email, deadline tracking, wipe verification, and escalation.

License Lifecycle

Assign or reclaim software licenses by checking for unused seats before buying and leaving a billing note on every change so client spend stays accurate.

Litigation Hold

Place or manage a legal hold on a user mailbox and data with scope confirmed by an authorized requester and no user notification unless counsel approves.

New Hire Onboarding

Run a new-hire onboarding end to end with role-based accounts, licenses, groups, hardware, and MFA driven from the client's own onboarding checklist.

Offboarding Completeness Audit

Post-offboarding sweep for licenses still assigned, live delegations, unreturned devices, lingering MFA methods and sessions, and external share links.

Password & MFA Recovery

Reset a password or recover MFA with an identity verification ladder, locked-versus-disabled account check, and secure delivery of the new credential.

Rehire Reactivation

Safely restore a disabled account for a returning employee with authorization verified, old group memberships reviewed, and credentials reset fresh.

Shared Mailbox Delegation

Set up or change shared mailbox access (Full Access, Send As, Send on Behalf) with owner approval and an audit note recorded on the delegation ticket.

Travel Access Window

Open a temporary conditional access exception for a traveling user with automatic expiry and a tracked revert task so location policies stay in place.