Atlas project production

Non-HR Onboarding and Timely Deactivation Workflow

Merges Google Sheets account-request intake into the staff identity workflow so non-HR roles can be provisioned and deactivated through the same controlled pipeline.

Internal-only entry. Do not publish externally without review.

Type: Component
Lifecycle: Active
Last touched: 2026-03-24
Visibility: Internal

Purpose

Automate onboarding and deactivation for interns, student teachers, contractors, and other roles not cleanly represented in HR.

Current state

This is an active component of Staff AD Account Management. The production staff lifecycle workflow imports sheet-based exception intake before downstream directory actions so non-HR identities follow the same governed account path as HR-backed staff where appropriate.

Next step

Document the current request sheet, approval chain, and deactivation controls for non-HR identities inside the parent staff AD runbook.

Interfaces

Inputs

Google Sheets account requests
OCDE HR 2.0 staff data
identity-processing scripts

Outputs

provisioned or deactivated accounts
snapshot artifacts
downstream identity updates

Reality to Action trace

Reality Ingestion

Contributes in this stage.

Canonical Storage

Not in scope.

Automation Engines

Contributes in this stage.

Human Interfaces

Not in scope.

Operational Adoption

Contributes in this stage.

Core workflow

TBD. Document the 5-10 steps that define the core workflow.

Data integrity and contracts

Source of truth rules

The request sheet is authoritative for exception intake.
Identity systems remain the final target state for account lifecycle actions.

Safe handling

Restrict access to request sheets and snapshots.
Document approval and removal controls before broadening use.

Operational notes

Reliability posture

Recurring lifecycle processing exists, but the request-intake runbook and deactivation controls are not yet centralized.

Observability

Integr8r logs
snapshot artifacts
PowerShell post-processing logs

Security and privacy

Confidential staff-like identity and access data; request sheets and snapshots should remain restricted.

Dependencies

Upstream

Google Sheets request governance
Integr8r ActiveDirectoryStaff job
identity admin permissions

Downstream

Active Directory
Google directory sync
downstream access state

Ownership

Owners

Technology Services, Josh Barton

Users

Technology Services, requesting departments, Josh Barton (owner)

Non-HR Onboarding and Timely Deactivation Workflow

Operational Notes

The registry ties this workflow to the ActiveDirectoryStaff pre-command snapshot import.
This is not a side process anymore; it is merged into the production identity lifecycle path.
Failure creates access delays or stale accounts rather than silent data corruption.

Registry Alignment

Former standalone registry entry INT-010 is now documented as component scope within Staff AD Account Management.
Registry clarified: non-HR onboarding is intentionally merged into the live staff identity automation and is not only a manual exception path.
Validation gaps: confirm the current request sheet, approval chain, and deactivation rules for nonstandard identities.