Joiner Onboarding

This is the help text the console shows in the help panel on this page.

Joiner (Onboarding)

Track the access every new joiner needs and see whether they actually receive it. Each joiner has a To-Do list generated from your Access Profiles.

The case list

• Use Show joiners to switch between Open, Completed and All.
• The summary cards show Open joiners, Pending access items and Marked done, not yet detected.
• Each row shows the employee, the Due date, the profiles the list was generated from, a progress bar (for example 3 of 5 granted) and the case status. Expand a row with Show To-Do list.

The To-Do list

Each item is one access the joiner needs:

• Granted: the latest access scan found active access. The list shows Latest detection, not the date access was given.
• Pending: required, nothing detected yet and nobody confirmed it.
• Marked done: a person confirmed it with a note and the access scan has not seen it yet. An owner or manager sees the note; other roles do not. If active access appears later the item becomes Granted by itself.

Use Mark as done to confirm an item (a note of up to 500 characters is required). Use Undo done to put it back to Pending; a completed case is reopened. Items that came from a manual task show Complete instead.

Start a joiner

Click New joiner, choose the employee and the Due date (a past date is allowed). The dialog previews the profiles and assets that will apply. If no profile matches, the To-Do list will be empty; use Manage access profiles to add one. An employee can have only one open joiner case; the dialog links to the existing one.

Keep the list up to date

The list is a snapshot taken when the case was created. Changing a profile or the employee later does not change it. Click Refresh from profiles to add newly required access. Nothing is ever removed or changed. Use the pencil to Edit due date, or Cancel case to stop tracking the remaining items.

Only owners and managers can create, change or cancel cases. A short Too many requests message with a countdown appears if you refresh too often; the page retries by itself.

Suggest access for a job title

The collapsible panel below the list keeps the AI profiler: enter a job title and click Generate Profile to see the access peers in similar roles already have. Use it as input when writing an access profile.

Why This Matters

Over-provisioning at onboarding is one of the most common sources of excessive access. Role-based profiles give new employees least-privilege access from day one and leave an auditable record, supporting ISO 27001 A.5.18 and SOC 2 CC6.3.