TechOps & FinOps · Example engagement

Zero-touch joiner, mover and leaver for a growing workforce

Fast-hiring services firm · Google Workspace · 60+ SaaS apps

Onboarding took days of tickets, role changes left old access in place and leavers kept SaaS accounts and paid seats for weeks.

Employee lifecycleJoinerMoverLeaverAccessEmail & calendarSSO appsShared drivesAdmin rolesVPN

The challenge

Where things stood.

  • Access granted by hand across dozens of applications.
  • No single source of truth for who should have what.
  • Unused seats renewed automatically every year.

Our approach

How we would solve it.

  1. 01

    Agree the source of truth

    HR events drive identity changes; roles map to access bundles.

  2. 02

    Centralize identity

    SSO, MFA and role-based access for Workspace and SaaS applications.

  3. 03

    Automate the lifecycle

    Joiner, mover and leaver workflows provision, adjust and revoke access with verification.

  4. 04

    Reclaim and govern

    Seat reviews and a renewal calendar so licences follow actual use.

Deliverables

What the client receives.

Services involved:

  • Role-to-access model
  • SSO and MFA rollout plan and configuration
  • Automated JML workflows with audit trail
  • SaaS licence register and renewal calendar

Outcomes

What success looks like.

  • New joiners productive on day one
  • Leaver access removed the same day
  • Every app access tied to a role and owner
  • Seats renewed only when used

Example engagement: an illustrative scenario showing how DotConn approaches this kind of work. Client details and figures are not shown.