Use case · Cross-industry
Joiners and leavers, carried by agents under approval
graal Agentic Platform turns an HR process into a workflow: agents draft the access plan, create the account and groups on the planned date, order the laptop and follow the badge handover; another person approves what is sensitive, re-authenticated. When someone leaves, everything is undone in reverse order, and every effect stays in the log.
The challenge
Late arrivals, incomplete departures
- Accounts created by hand the day before, and permissions copied from a colleague.
- Laptops and badges ordered by email, with no follow-up.
- Departures where an access survives because one step was not undone.
- The wish to hand these tasks to agents, without giving them the keys to the directory.
How graal handles it
A joiner and leaver workflow
Step 01
Prepare
When the ticket is created, an agent drafts the person’s access plan — accounts, groups, laptop, badge — and HR approves it.
Step 02
Schedule
Writes go out on their date — the account and groups before arrival, the laptop ordered from the supplier, the badge ready for day one.
Step 03
Approve what is sensitive
By default, a write to a third-party system waits for another person’s approval, re-authenticated. The agent holds no directory credential; the platform writes on its behalf, after approval.
Step 04
Hand over and attest
Handing over the laptop and the badge is a human task, with its form and its attested sentence.
Step 05
Undo on departure
On departure, effects are undone in reverse order; a check the next day verifies that no access survives.
What you get
- Accounts and groups ready on day one
- Sensitive access approved by a person
- Complete departures, checked the next day
- A log of every effect, per person and per date
What stays with you
- Your directory and your identity provider
- The workflows, policies, approvals and audit trail
- The choice of agents and of the model that drives them
Capabilities involved
graal Agentic Platform
Your AI agents move your processes forward
- Agent workflows
The HR process described as a workflow, with dated actions.
- Guarantees and approvals
A re-authenticated approval by another person before any sensitive write.
- Models, tools and budgets
Directory and supplier tools called for the agent, with no credential handed over.
- Evidence and audit
Every effect recorded, executed once, undone in reverse on departure.
Frequently asked questions
Do we need the Data Platform?
No. This process handles no analytics data: the Agentic Platform is enough.
Does the agent have access to the directory?
No: it proposes actions, and the platform executes them on its behalf, with its own credentials, after the approval your policy requires.
Which systems are connected?
Your identity provider, your device fleet, your access control and your tracker, through connectors declared and reviewed like code.
Hand your next joiners to agents
In 8 weeks, a joiner and leaver workflow, on your systems, under your approvals.