REACTIVATE ACCOUNTS WITH THE TOUCH OF A BUTTON TO QUICKLY BRING BACK SEASONAL OR FURLOUGHED WORKERS - FORFIRM

REACTIVATE ACCOUNTS WITH THE TOUCH OF A BUTTON TO QUICKLY BRING BACK SEASONAL OR FURLOUGHED WORKERS

When, ACME Inc., our hypothetical telecommunication company, bounces back from a large economic downturn, it is in a position to bring back its 20,000 furloughed workers.

George, the IT director, and his team are tasked with ensuring that these 20,000 employees will be reinstated with the exact same entitlements and permissions they were assigned before the furlough. Audits will be performed to ensure that this happens and that users receive no more or no fewer entitlements than they had pre-furlough.

Fred, the IT administrator, is again tasked by George to do this work. Fred initiates the undo-deprovisioning of these 20,000 employees with by selecting an OU, right clicking to obtain a menu and selecting the undo-deprovisioning option.

Note: If Fred would like to schedule this task, he can use Active Roles’ built-in automation workflow. With this method, he configures the search criteria and points it to the ‘Furloughed Accounts’ OU, then he selects the ‘Undo Deprovision’ object-management module and schedules the run time to kick off at midnight.

The built-in Active Roles policy for Undo Deprovisioning has been configured to:

  1. Restore user to original security group memberships, as well as any distribution groups
  2. Prompts the user to reset a password (optional but recommended)
  3. Restores any attributes that were changed on the user account due to the deprovisioning
  4. Restores home folder access
  5. Restores mailbox access

By using Active Roles Undo – Deprovisioning feature, Fred can quickly and seamlessly return all entitlements to the furloughed employees. ACME saved many expensive work hours by using this feature. What would have taken approximately 20 minutes per user account to manually perform (multiplied by 20,000), Fred completes in seconds. Furthermore, Fred can complete this with the knowledge that all reinstated accounts, permissions and access are the same as the day they were furloughed.

If this task were performed manually, the potential for error would be enormous. Oversights, such as missing user access or access to the wrong level of resources can easily happen without automation. So manual processes when dealing with high-volume provisioning tasks can lead to vast amounts of lost productivity, risk and unplanned costs, as well as delays in generating income.

George, the IT director, is confident in Active Roles’ ability to restore the entitlements to the respective users. In addition, when he needs to show (for an audit) that original entitlements were restored, he can by means of the ‘User Entitlements’ feature on the account profile.

To simplify approximate ROI calculations, let’s assume that ACME Inc. is an example of a corporation with 100,000 user objects, 10 IT administrators, 5 Exchange administrators and 50 help desk personnel. They would stand to save roughly $5.5 million over three years with Active Roles, than if they continued to use native tools. An average annual ROI of 50 percent and a cumulative ROI over three years of 49 percent.

 

You could be also interested in: Corporate Compliance

Back to blog