Practical playbook
A new employee arrives on day one. Do I have a laptop? No, not ordered yet. Do I have M365 access? Probably yes, let's check... no. Do I have a building access card? Nobody gave me one. Do I know who to go to? Not really. This is not fiction – this is the daily reality of most European companies. The first day is chaos, the second is waiting, only the third is actual work. Onboarding automation changes that completely. One HR form triggers 30 tasks in parallel – AD account, email, licences, access, equipment, training schedule, Teams channels. The employee is productive from day one. This article shows how to build it in Power Automate.
A list of 30+ tasks in typical onboarding in a 100-person company. Each in a classic scenario performed manually by 4–6 people.
HR side (10 tasks): employment contract signing, tax declarations, health & safety declarations, GDPR, work regulations, pension declarations, social security registration, bank details, medical exams, work clothing/safety equipment.
IT side (12 tasks): Active Directory account, email, M365 licence, department-specific tool access (Salesforce, monday.com, Slack, GitHub, Adobe), VPN, printer, SharePoint file access, company phone, HR system account, laptop configuration, mobile access (Outlook on phone), MFA.
Manager side (5 tasks): welcome calendar for the first week, adding to team Teams channels, team introduction, first-month training plan, assigning a mentor.
Facility side (5 tasks): building access card, parking spot, desk/workstation, business cards, company T-shirt.
Total 30+ tasks × 5–15 min each = 5–10 hours of work. Times engagement of 4 people = 5 working days. After automation – one HR form and 5 hours of oversight instead of 5 days of scattered work.
Onboarding automation architecture: one form in Power Apps (HR fills), one flow in Power Automate (triggers 30 tasks in parallel), progress monitoring in SharePoint Lists, Teams notifications for each involved person.
Step 1: Power Apps form. Fields: first name, last name, private email, phone, department, role, manager, start date, projects, office location. HR fills once, 3–5 minutes.
Step 2: after form submission Power Automate triggers the main flow. First action: create an entry in SharePoint Lists Onboarding tracker with 30 tasks and status of each.
Step 3: in Power Automate subflows run in parallel for each area – IT (Entra ID, licences, access), HR (documents, social security), Manager (calendar, channels, mentor), Facility (card, desk, business cards). Each subflow assigns tasks to the right people with SLAs.
Step 4: each involved person gets a Teams notification with their task list and deadline. After completing a task, clicking mark complete updates the tracker in SharePoint.
Step 5: Power BI dashboards show HR in real time which tasks are done, which not. If any breaches SLA – automatic reminder + escalation.
The most complex part of onboarding automation is access provisioning. Classically IT does this manually and often with errors. With Microsoft Entra ID + Power Automate – fully automatic and error-free.
Provisioning stack. Power Automate receives data from the HR form. Calls the Microsoft Entra ID API: creates a user account with company email, adds to a group matching the department (e.g. Sales-Team, Marketing-Team). Dynamic groups in Entra ID automatically assign M365 licences and app access according to the group.
For non-Microsoft tools (Salesforce, monday.com, Slack, GitHub, Adobe) Entra ID acts as Identity Provider with Single Sign-On (SSO). One account created in Entra ID = automatic access to all company apps. No manual account creation in each tool.
Microsoft Intune for devices: when IT hands a laptop to the new employee, they log in and Intune automatically configures the laptop per company policy. 30 minutes instead of 4 hours of manual configuration.
Price: Microsoft Entra ID P1 (USD 1.5/user/month) is enough for most companies. Intune in M365 E3/E5 packages. Deployment time: 4–8 weeks with a consultant for a 100-person company.
After accepting the offer the employee gets a welcome email 7 days before start. In the email: a link to the Power Apps Pre-onboarding app where they fill the last documents (declarations, bank details, emergency contacts), expected medical exam date.
Day -3 before start: the employee gets a notification with a link to the company account (your account will be active from Monday), the health & safety training date, the plan for the first week.
Day 1 (Monday 9:00): the employee walks into the office. Access card waiting. Laptop on the desk. They log in – Intune configures everything automatically in 30 minutes. Meanwhile they have coffee with the manager (calendar already set). Afternoon: first team meeting.
Day 2: the employee enters every company tool without asking for access – everything ready through SSO. First real tasks.
Week 1: training schedule, mentoring, 1:1 meetings with the manager. All set automatically.
By the end of the first week the employee has 100% conviction that they joined a company that has things sorted. This really impacts retention in the first 12 months (the most important period).
The first 8 hours of an employee in a new company shape their assessment of the workplace for 12 months. Day-one chaos = an employee with doubts who usually leaves within six months. Smooth onboarding = an employee who knows they joined a well-run company.
Often skipped part of automation: offboarding. An employee leaves, nobody remembers to revoke access, licences, equipment. Half a year later the company pays for 10 unused licences, 3 former employees still have access to company data in Slack.
Offboarding automation is the mirror of onboarding. HR fills the Power Apps Offboarding form with the contract end date. Power Automate triggers the workflow: scheduled for the last working day – Entra ID account disable (or deactivate if data retention required), M365 licence reclaim, SSO revoke across all apps.
Equipment: IT gets a notification to pick up the laptop. Intune enforces a wipe. Access card deactivated. The manager gets info on project handover.
Compliance: employee data archived per GDPR (50 years for employee data in Poland, varies by country), emails archived for 3 years, file access archived or transferred to successor.
Cost of adding offboarding to existing onboarding automation: EUR 1.1–2.3k, time: 2–3 weeks. Real impact: dozens of licences reclaimed, zero forgotten access, full GDPR compliance.
Mistake 1: building onboarding automation without HR system integration. Employee data entered twice. Correction: HR system integration (BambooHR, Workday, Sage People) from day one.
Mistake 2: no champion role in the company. Onboarding deployed, nobody maintains it. After a year 5 new company tools have no automatic access. Correction: HR or IT lead as onboarding owner, quarterly review.
Mistake 3: overly elaborate workflow. Trying to cover 60 tasks at once. The team gets lost. Correction: start with 20 most important, add the rest after 3 months.
Does a small company (10–30 people) need this automation? Yes, in simplified form. Microsoft Forms + Power Automate in M365 is enough. Without Intune and Entra ID Premium – regular manual laptop configuration.
How much does full onboarding automation cost? EUR 7–14k of consultant work for a 100-person company (audit, Power Apps configuration, Power Automate, Entra ID, Intune, HR and IT training). Time: 6–10 weeks.
What about GDPR and data protection? The workflow respects GDPR by design. Data flows within M365 (GDPR compliant), archived in SharePoint with metadata and retention, change audit in Microsoft Purview. Often easier to meet GDPR with automation than with manual process.
Onboarding automation is one of the fastest-paying-back automations in a company with active rotation. 5 days → 5 hours, drastically better first impression of the new employee, dozens of HR and IT hours recovered monthly.
Stack: Power Apps + Power Automate + Microsoft Entra ID + Intune (for M365 companies). Cost EUR 7–14k for a 100-person company, time 6–10 weeks. ROI 4–8 months.
Adding offboarding (EUR 1.1–2.3k, 2–3 weeks) closes the full employee lifecycle in the company. Zero forgotten access, zero overpaid licences, full GDPR compliance.
A fuller picture in our articles on employee request automation and IT and helpdesk process automation.
About this page
About the author
Kacper Włodarczyk
Założyciel ALGORCOMP
Założyciel ALGORCOMP. Specjalizuje się we wdrożeniach Microsoft 365 Copilot, Copilot Studio, Power Platform (Power Automate, Power Apps, SharePoint) oraz agentów AI dla średnich firm B2B w Polsce. Prowadzi dziesiątki projektów z zakresu strategii AI, governance Power Platform, automatyzacji obiegu dokumentów i procesów sprzedażowych. W publikacjach koncentruje się na praktycznych aspektach wdrożeń AI w organizacjach — od pierwszego POC do skalowania na całą firmę, ze szczególnym uwzględnieniem bezpieczeństwa danych, zgodności (RODO, NIS2, AI Act) i zwrotu z inwestycji.
Meet the team30 minutes of free conversation. We audit your current onboarding (mapping 30 tasks), identify gaps, plan automation in Power Apps + Power Automate + Microsoft Entra ID. No slides, no generalities.
Featured
What an RPA robot actually does after working hours. A plain-language tour of what a robot really does step by step, and the kinds of work it handles in companies – invoices, data from portals, reports, transfers between systems.
RPA executes, AI decides – it sounds simple, but in practice companies confuse the two and end up picking the wrong tool. A clear, jargon-free walk through where the robot ends and the AI begins, and how to combine them.
Not every process is a fit for a robot. How to spot the ones that pay back fastest and what to ask yourself before launching an RPA project at all. A readable shortlist, no technical jargon.
