Microsoft 365 User Onboarding & Offboarding | Permissions with At0mAccess

Still getting “just give them the same access as Alex”? See how At0mAccess, an At0mFlow template, brings Microsoft 365 user onboarding, group permissions and offboarding into a reviewed process you can verify. Follow one test account from its starter access package through a project-access change and offboarding. We check the results directly in Microsoft 365 and refresh At0mFlow’s licence inventory to show the changes in both places. BEST FOR IT administrators, MSPs and internal IT teams who want clearer joiner, mover and leaver processes, fewer missed access changes and a useful record of what was approved and applied. WHAT YOU’LL SEE • Define a starter package with a security group and a free licence. • Review the proposed onboarding steps before applying them. • Verify the account, group membership and licence in Microsoft 365. • Add a separate project-access package and check both groups. • Review offboarding, remove memberships and the licence, and confirm sign-in is blocked. • Keep the change history and check the updated licence inventory. CHAPTERS 00:00 Meet At0mAccess 00:20 The problem with “same access as Alex” 01:00 Define the starter access 01:24 Enter the new starter 01:40 Review and apply onboarding 02:16 Verify the result in Microsoft 365 02:40 See the licence inventory update 03:06 Add project access 03:34 Verify both groups in Microsoft 03:58 Prepare offboarding and discuss the mailbox handoff 04:34 Review the offboarding plan 05:07 Confirm the completed changes 05:28 Verify blocked sign-in, groups and licences 06:01 Refresh the licence inventory 06:22 Review the change history ABOUT THIS DEMONSTRATION Recorded in our real environment with a dedicated test account and two test groups that grant no company-resource access. Only Microsoft Power Automate Free was assigned. Its assignment count moves from 2 to 3, then back to 2 after removal. Paid seats and estimated paid costs are unchanged; licence allocation is not usage or a claim of savings. Jordan’s sign-in stays blocked throughout. Password setup and enabling sign-in are separate administrator handoffs, so the onboarding record remains awaiting handoff. Advanced administrator-role evidence required a manual check. Shared-mailbox naming and the Exchange administrator handoff are explained, but mailbox conversion is not demonstrated. TOOLS USED At0mFlow • At0mAccess • Microsoft 365 admin centre • Microsoft Entra security groups • Microsoft Power Automate Free • At0mFlow Licence Cost Centre EXPLORE AT0MFLOW Website https://at0mflow.com Documentation https://at0mflow.com/docs Automation templates https://at0mflow.com/template-automat... Contact https://at0mflow.com/contact Free tools on GitHub https://github.com/At0mFlow Guides & toolkits https://at0mflow.gumroad.com/ WATCH NEXT Microsoft 365 licence review    • Microsoft 365 Licence Review: Costs, Clean...   PowerShell script to a flow draft    • Turn a PowerShell Script into a Flow Draft...   Full IT estate walkthrough    • PowerShell Script Management & IT Estate M...   FOLLOW AT0MFLOW YouTube    / @at0mflowofficial   LinkedIn   / at0mflow   Instagram   / at0mflow   Facebook   / at0mflow   Subscribe for practical walkthroughs on automation, access management and keeping your IT estate documented. #At0mFlow #Microsoft365 #UserOnboarding #UserOffboarding #AccessManagement #MicrosoftEntra #ITAutomation #At0mAccess