New employees most often wait for access to systems. Microsoft Entra ID, Microsoft’s service for managing accounts and sign-in in Microsoft 365, lets you grant access by department instead of manually for each person. Power Automate creates the account from the form data and enters the department and job title in it.
From there, rules take over. A dynamic “Sales” group automatically takes in everyone whose account lists the sales department. Licences, a team in Teams, SharePoint libraries and the department’s applications are all assigned to this group. Dynamic groups require an Entra ID P1 licence, which is included in, among others, Microsoft 365 Business Premium.
For applications outside Microsoft, such as monday.com or a CRM system, it is worth setting up single sign-on (SSO). The employee then signs in with their company Microsoft account, and access follows from group membership rather than from a separate account created by hand. Some applications also allow accounts to be created automatically, but this has to be checked for each one separately.
A laptop can set itself up. Windows Autopilot, together with Intune – Microsoft’s service for managing company devices – means that a new computer straight out of the box installs the company’s apps and settings after the first sign-in. Automatically enrolling a device in Intune requires Entra ID P1.