This domain groups systems that solve Identity Access problems - shared vocabulary, common interfaces, and repeatable operational constraints. Use this page to see which systems already exist, what they ingest and emit, and which patterns we repeatedly rely on in this problem space.
Domains are how we avoid reinventing the same solution in slightly different shapes. When a domain repeats, it’s a signal to standardize schemas, mapping layers, auth patterns, and operator workflows.
This domain groups systems focused on identity access workflows, shared data models, and repeatable operational constraints.
No playbooks mapped yet.
Detect, document, and remediate risky Drive sharing states at scale without manual inspection. It ingests target user/email; workspace drive ACL data; shared …
Queries LDAP and enriches OSTicket user context so support records stay aligned to directory identity data.
Sends current 9-12 student data into ASB Works so student activity or account records stay aligned without manual nightly imports.
Provides Google Workspace-based single sign-on to Brightly operational workflows so staff access is simpler and more secure; the additional Brightly module name …
Maintains CALPADS data quality through Aeries validation rules, automated SQL validation workflows, weekly responsibility-based notifications, and manual review …
Synchronizes district data with CCGI and supports transcript, graduation, and validation work needed for college and career readiness records.
Integrates student insurance billing information with Leader Services to support SPED billing workflows.
Exports current student demographic and residence data from Aeries into DecisionInsite for planning and demographic-analysis workflows.
Generates and imports patron records into Follett Destiny so student library accounts stay aligned to current SIS data.
Syncs OCDE HR 2.0 employee and substitute data to Frontline nightly so Substitute Management and Absence Management account state, permissions, and …
Historical predecessor platform retained only to preserve lineage from GoGuardian to NetRef to Classwize.
Expand nested Google Group membership into a sheet-backed 2SV roster used for security review and follow-up.
Provide a deterministic Rust plan/apply CLI for Google Group membership and settings reconciliation, with guardrails and service-style deployment options.
Maintain selected Google Group memberships and manager roles through the current GAM-based runner, with a newer Rust guard path under validation.
Enforces Google Workspace multi-factor authentication through staged group-based enforcement while sustaining ongoing 2SV reporting, notice delivery, and …
Keeps Google Workspace license assignments aligned to user lifecycle state through recurring GAM-based maintenance runs.
Exports BJHS student, faculty, and schedule data into Hero K12 so the platform stays aligned to current SIS roster state.
Carries HR-maintained preferred-name changes through the staff identity pipeline so downstream directory and display systems stay aligned.
Legacy Windows production runner for BOUSD integration jobs, including SQL exports, file transfers, write-back workflows, and report mailers.
Restores MBOX/EML archives into Google Workspace accounts during mailbox recovery or migration events.
Merges Google Sheets account-request intake into the staff identity workflow so non-HR roles can be provisioned and deactivated through the same controlled …
Submits prior-year graduate records to National Student Clearinghouse StudentTracker to support postsecondary tracking and related reporting workflows.
Keeps Aeries staff records aligned with OCDE HR data for identity, assignment, and compliance reporting, with `ocdehr_aeries_sync` as the active runtime and …
Tracks the district safety-platform identity path for Raptor, with continuity-level production evidence and explicit validation debt.
Tracks the active telephony-to-directory alignment path backed by `Push-ShoreTelToAD.sh`, while preserving uncertainty about exact field direction, cadence, and …
Manages the production staff Active Directory lifecycle so HR-backed staff, approved non-HR identities, preferred-name handling, and onboarding communications …
Sends account-ready onboarding emails from the production staff lifecycle process so new staff communication is timely and consistent.
Uses Aeries student data and local post-processing to keep student Active Directory state aligned to district roster and school-context changes.
No matching projects found. Try another keyword.
