CAC 40 energy group, sales department
Access follows the staff list
Grant, change and remove access to six business applications from a single staff list, checked every night.
- Service
- Automations
Context
A sales department of several hundred people. Six business applications. People joining, people leaving, people changing jobs.
The problem
Every access was requested case by case. People who had left kept their rights. Newcomers waited.
What we built
A single staff list: name, job, access group. Behind it, four automations:
- the first completes the record from the company directory;
- the second adds, changes or removes the person in the matching group, then sends a summary;
- the third removes from the groups anyone who no longer has a row;
- the fourth, every night at 3:30 a.m., compares the records with the directory and corrects seven fields, with a safety cap.
Sixteen access groups are maintained this way.
And a portal: a home application with one card per application, the department's news and an idea box. Every application has its own “Portal” button.
Result
In production since 11 October 2026, with the nightly check activated on 12 October.
One row added to the list, and the person has their applications.
For your IT team: Power Automate, SharePoint, Microsoft 365 groups, Power Apps, Outlook
- Hosting: inside your Microsoft 365. If an outside tool is useful, it is named and you decide.
- Accounts: a service account of your own for the automations.
- Permissions: inherited from your Microsoft 365 groups, nothing separate to maintain.
- Licenses: announced before we start, with the exact cost.
- Handover: documentation, user guide, quick reference; no proprietary code.
A process that costs you too much? An Excel file that has outgrown itself? A team losing time?
Describe it in five lines. Reply within 24 h with a costed estimate.