Ops reference

Joiner / leaver runbook

Identity, device, mailbox, admin — a copyable script you own.

Stays in this tab.

HR tools generate onboarding emails. This generates the revoke list the same day.

NameRole

Identity accountMailbox / groupsDevice / MDMVPN / MFAAdmin / break-glassShared mailbox

TUCE runbook · LEAVER
Person: [NAME]
Role: [ROLE]
Date: 2026-10-16

1. Revoke / retrieve — Identity account
2. Revoke / retrieve — Mailbox / groups
3. Revoke / retrieve — Device / MDM
4. Revoke / retrieve — VPN / MFA
5. Revoke / retrieve — Admin / break-glass
6. Revoke / retrieve — Shared mailbox

Owner signs when done.

All desks

Need the stack held after the number.

Built by TUCE. This tool stays in the tab. The commercial door is still the $999 assessment.

Start the $999 assessment