# Joiner Onboarding
URL: https://docs.autociso.io/console/operations/onboarding/
Description: Track the access every new joiner needs and see whether they actually receive it. Each joiner has a To-Do list generated from your Access Profiles.

*This is the help text the console shows in the help panel on this page.*

## Joiner (Onboarding)

Track the access [every new joiner needs](https://docs.autociso.io/product/lifecycle/onboarding/) and see whether they actually receive it. Each joiner has a **To-Do list** generated from your **[Access Profiles](https://docs.autociso.io/console/operations/access-profiles/)**.

### The case list
- Use **Show joiners** to switch between **Open**, **Completed** and **All**.
- The summary cards show **Open joiners**, **Pending access items** and **Marked done, not yet detected**.
- Each row shows the employee, the **Due date**, the profiles the list was generated from, a progress bar (for example *3 of 5 granted*) and the case status. Expand a row with **Show To-Do list**.

### The To-Do list
Each item is one access the joiner needs:
- **Granted**: [the latest access scan](https://docs.autociso.io/console/access/access-audit/) found active access. The list shows **Latest detection**, not the date access was given.
- **Pending**: required, nothing detected yet and nobody confirmed it.
- **Marked done**: a person confirmed it with a note and the access scan has not seen it yet. An owner or manager sees the note; other roles do not. If active access appears later the item becomes **Granted** by itself.

Use **Mark as done** to confirm an item (a note of up to 500 characters is required). Use **Undo done** to put it back to Pending; a completed case is reopened. Items that came from a manual task show **Complete** instead.

### Start a joiner
Click **New joiner**, choose the employee and the **Due date** (a past date is allowed). The dialog previews the profiles and assets that will apply. If no profile matches, the To-Do list will be empty; use **Manage access profiles** to add one. An employee can have only one open joiner case; the dialog links to the existing one.

### Keep the list up to date
The list is a snapshot taken when the case was created. Changing a profile or the employee later does not change it. Click **Refresh from profiles** to add newly required access. Nothing is ever removed or changed. Use the pencil to **Edit due date**, or **Cancel case** to stop tracking the remaining items.

[Only owners and managers](https://docs.autociso.io/getting-started/roles-and-permissions/) can create, change or cancel cases. A short *Too many requests* message with a countdown appears if you refresh too often; the page retries by itself.

### Suggest access for a job title
The collapsible panel below the list keeps the AI profiler: enter a **job title** and click **Generate Profile** to see the access peers in similar roles already have. Use it as input when writing an access profile.

### Why This Matters
Over-provisioning at onboarding is one of the most common sources of excessive access. Role-based profiles give new employees least-privilege access from day one and leave an auditable record, supporting ISO 27001 A.5.18 and SOC 2 CC6.3.