awml / new-starter-accessA new starter's access, set upPublic · Version 1 of 1ForkWho may see each partWhere each part runsYAMLChecksNo mistakespeople opsHR teamITservice desk, IT approversstanding rule: name, role andstart date only · adds servicedesk and IT approversthe standard accountsnever read by ITthe verdictTriggerA new hire recordDataThe hire recordCode · doCreate the standard accountsfor the roleConnectionThe directory, IT's serviceaccountDataExtra access the managerasked forDataThe access policyAI · checkCheck the extra accessagainst the policyPerson · doApprove the extra access andgrant itOutside actionGrant admin accessAskFlow only+−Fit