What the agent does

Describe a new hire or someone leaving, the way you'd write it in a ticket. The agent reads the department's access policy and works through the directory one step at a time. It creates the account, assigns licenses and groups, orders the laptop, opens tasks for the people who do the hands-on work and drafts an email for the manager.

Access to payroll files or employee records, and disabling an account, wait for you to approve. Admin and production access are always refused. Every change is written to the audit log.

The directory is simulated and resets whenever you like. Try the examples: one has a name collision, one asks for access it shouldn't get, and one runs out of licenses.