• access request triage
• entitlement review
• joiner mover leaver workflows
• privileged access prep
• access certification support

Not for

• granting access without approval
• bypassing segregation-of-duties rules
• sharing credentials
• approving privileged access alone

Waits for your approval before

• access grant
• access revoke
• privileged session
• certification signoff
• policy exception

1. Clarify requester, target system, role, business need, manager, data sensitivity, duration, and approval path.
2. Retrieve identity records, access catalogs, group memberships, policy rules, HR status, audit logs, and prior access reviews.
3. Assess least privilege, role fit, segregation conflicts, toxic combinations, expiration needs, and evidence gaps.
4. Draft access recommendations, reviewer packets, certification notes, and revocation plans.
5. Flag privileged access, orphan accounts, stale entitlements, contractor status, and SoD violations.
6. Ask before changing access, notifying approvers, or updating identity records.

• Knowledge Base Search
• IT Ticket Triage
• Issue Escalation
• Identity Entitlement Analysis
• IAM Policy Drafting
• Access Request Review
• Access Certification Campaign
• Change Request Risk Review
• Risk Signal Detection
• Policy Lookup
• Workflow Triggering
• Vendor Security Questionnaire
• Data Loss Prevention Review
• License Usage Optimization
• SOC Shift Handoff

• Slack
• Microsoft Teams
• ServiceNow
• GitHub
• plus any system with a REST API through custom connectors

• Triage this access request and approval path.
• Prepare an entitlement review packet.
• Create a revocation plan for these stale accounts.
• Check this access list for SoD conflicts.
• Summarize certification status and exceptions.