What problem does it solve? Identity and access changes are security-sensitive operations where mistakes cause breaches, orphaned access, or compliance failures. This Skill structures joiner-mover-leaver processing, access requests, and authentication troubleshooting around authoritative directory evidence, approval controls, and post-change readback instead of ad-hoc directory edits. ## Core Features & Use Cases - Lifecycle Workflows: Guided joiner, mover, and leaver procedures covering birthright access, separation-of-duties checks, session revocation, ownership transfer, and license reclamation. - Access Request Handling: Evaluates least privilege, data sensitivity, and expiry requirements before granting group, role, application, or guest access, with mandatory approval and effective-state readback. - Authentication Troubleshooting: Ordered diagnostic sequence covering account state, sign-in logs, MFA registration, conditional access, device compliance, and session state. - Use Case: An employee transfers departments. The Skill calculates access additions and removals, flags separation-of-duties conflicts, removes obsolete entitlements with expiry-bound overlap, and reads back effective memberships to confirm the change. ## Quick Start Ask the assistant to process a leaver offboarding for a specific user, including sign-in disablement, session revocation, role removal, and ownership transfer verification.
