JML Automation Solution

The processing of new joiners to a businessis a hugely complex and time-consuming process for Service Desks and IT departments. When a new starter joins an organization there is nothing more frustrating than having to wait for access to email and the other tools they need to start becoming a productive team member.

Processing leavers is an equally complex task but for security and commercial sensitivity is arguably even more time critical. Businesses would like to give team leaders and managers access to process their own Joiners and Leavers via self-service facilities to reduce the workload on the heavily utilised service desk and front-line support teams. Equally with IT Security being in the forefront of everyone’s minds it is a challenge that requires careful balancing between providing the right facilities to end users, and not compromising the security or integrity of your configuration.

Therefore, companies are increasingly looking for Automation to improve consistency and supportability, along with the self-service facilities whilst maintaining the security controls. To meet this need Kelverion have built the Joiners Movers Leavers (JML) Solution for Azure Automation. The JML Solution for Azure Automation provides an easy to use interface using the Kelverion Automation Portal, users are provided the rights to access portal services via group membership, but these rights are isolated from the IT infrastructure, such as Active Directory and Office 365, so it’s simple to provide portal facilities without providing rights to directly manage users and licenses. All the actions against the IT systems are carried out using an Azure Automation account, so every change is logged and carried out in a consistent way. All the data that drives the requests in the automation portal is discovered and maintained by the Azure Automation runbooks, so the automation portal is always in sync with the IT management experience. The Runbooks have been written using the Runbook Studio authoring application and leverage the integration and smart discovery capabilities provided by the Integration Module for SQL Server. These Integration Modules are available in the PowerShell Gallery.

The solution has three framework processes; automate a Joiner; a Mover; or a Leaver. Within those three frameworks we provide a set of pre-built action Runbooks which can perform actions as part of one of the framework process Joiner, Mover, Leaver.  The below action runbooks can be used within the framework to achieve the desired process.These form a structure that is easy to extend and provide an excellent starting point for organisations to continue their automation journey.

Action Runbooks:
• Create O365 User
• Add User to Groups
• Remove User from Groups
• Enable O365 Litigation
• Remove a License
• Disable Login
• Delete User
• Enable User
• AD Add User
• AD Add User to Group
• AD Remove User from Group
• AD Enable/Disable User
• Exchange Add User