IT & Security/First-party starter playbook
Onboard new employee
Provision access across Okta, Slack & Calendar.
// what it does
- 01Collect the essentials. Read the request and confirm you have the new hire's full name, work email, department, and role. If any of these are missing, stop and ask.
- 02Provision identity in Okta. Create the user in Okta and assign the group policies that match their department and role. Let Okta group membership drive downstream SSO app access — email, docs, and other connected apps — rather than provisioning each app by hand.
- 03Set up collaboration. Once their account is active, add them to the default company-wide and team Slack channels for their department and introduce them to the team.
- 04Schedule first-day basics. Add first-day orientation and first-week check-in events to their Google Calendar so they know where to be.
- 05Welcome and report. Send a friendly welcome message with first-day links in Slack, then post a summary of everything provisioned and anything left for a human to finish.
// guardrails in the draft
Never guess a department or role to unblock yourself — missing info means stop and ask the requester.
Assign access through Okta groups, never by granting individual app entitlements directly.
Don't claim to have created accounts you can't actually provision — if an app is out of reach, hand that step to a human and say so.
If any provisioning step fails, halt and report exactly what succeeded and what did not; do not silently continue.