Joiner-Mover-Leaver (JML) Automation for Microsoft 365
Manual onboarding and offboarding is slow and risky. Skytech Enterprise automates the joiner, mover and leaver lifecycle in Microsoft Entra ID and Microsoft 365, so new starters are productive on day one, role changes update access automatically, and leavers lose access immediately.
JML automation at a glance
Who this is for
IT managers, HR and operations teams handling frequent hires, role changes and departures.
When you need this
Headcount growth, slow onboarding, leavers keeping access, or a failed access-review audit.
Delivery model
Build project in Entra ID and Microsoft 365, then run as part of Microsoft 365 tenant management.
What is joiner-mover-leaver automation?
Joiner-mover-leaver (JML) is the identity lifecycle of an employee. Joiners need accounts, licences, groups, devices and apps. Movers need access added and removed as roles change. Leavers need access removed, data retained and devices recovered. Automation replaces manual tickets with consistent, auditable workflows.
Use our employee IT onboarding and offboarding checklist as a starting point.
What we automate
- HR-driven provisioning – account creation from your HR system or a structured request form, where supported.
- Role-based access – dynamic groups and access packages that assign licences, Teams, SharePoint sites and apps by department and role.
- Lifecycle workflows – Entra ID Governance tasks for pre-hire, first day, role change and last day.
- Device readiness – Windows Autopilot and Intune so laptops are ready on day one.
- Offboarding – sign-in blocking, session revocation, mailbox conversion, OneDrive handover and licence reclamation.
- Audit trail – evidence for access reviews and audits.
Our approach
- Map current onboarding and offboarding steps.
- Design roles, groups and workflows.
- Build automation in Entra ID, Microsoft 365 and Power Automate.
- Test with real starters and leavers.
- Run and refine as part of managed services.
Benefits
- New starters productive on day one.
- Leavers lose access immediately, reducing insider and data risk.
- Less manual work for IT and HR.
- Recovered licences and lower cost.
- Audit-ready records of every change.
Why choose Skytech Enterprise
- Microsoft Entra and Microsoft 365 specialists.
- Security built into the lifecycle, not added later.
- Practical automation sized to your HR systems and licences.
- Ongoing management after go-live.
Related services
JML automation FAQs
Common questions about onboarding and offboarding automation.
Which licences are needed for lifecycle workflows?
Entra ID lifecycle workflows require Microsoft Entra ID Governance licences. Simpler automation can be built with dynamic groups and Power Automate on Microsoft 365 Business Premium or E3.
Can you connect to our HR system?
Many HR systems can drive provisioning through native connectors or APIs. We confirm what is possible during discovery.
What happens to a leaver’s data?
We define retention rules: mailboxes can be converted to shared mailboxes, OneDrive files handed to managers, and data retained according to policy.
How fast is access removed for leavers?
Automated offboarding can block sign-in and revoke sessions at the scheduled time or immediately for urgent terminations.
Does this help with audits?
Yes. Every provisioning and removal step is logged, supporting SOC 2, ISO 27001 and HIPAA access controls.
Automate onboarding and offboarding
Talk to Skytech Enterprise about joiner-mover-leaver automation in Microsoft 365.