People Move.
Your Systems Keep Up.
Onboard, offboard, and reprovision users across any number of Microsoft Entra tenants from GitHub Actions. One command. Zero secrets. No manual portal clicking.
What Body Does
Smart Onboarding
Create user, assign license, add to groups, grant apps, set manager, send welcome email — all in one call.
Complete Offboarding
Disable account, revoke sessions, forward email, set auto-reply, delegate mailbox, transfer OneDrive, remove groups/apps/licenses.
Leave of Absence
Scheduled auto-replies with delegation. Optional account disable. Automatic re-enable on return date.
Shared Mailbox Conversion
Convert a departed user's mailbox to shared. Delegate access to the team. Reclaim the license.
Structured Audit Logging
Every action logged with timestamp, actor, target, tenant, and result. JSONL format. GitHub Step Summary integration.
OIDC Federation
No client secrets. No certificates. GitHub Actions exchanges a JWT for an Azure token automatically.
The Offboarding Pipeline
Disable Account & Revoke Sessions
Block sign-in immediately. Kill every active session across all devices and browsers.
Email Forwarding & Auto-Reply
Forward incoming mail to the manager. Set an out-of-office with departure messaging.
Mailbox Delegation
Grant FullAccess and SendAs to the delegate. The team can respond to pending threads.
OneDrive Transfer
Move all files from the departing user's OneDrive to their manager. Nothing gets lost.
Clean Up Groups, Apps & Licenses
Remove from all security groups. Revoke app assignments. Reclaim the Microsoft 365 license.
Never click through another offboarding checklist.
One PowerShell command. 15 minutes. Complete audit trail. Deploy User Lifecycle Agent today.
Clone on GitHub