Skip to content

The work that repeats, and the environments underneath it

If a person does it every week, it should not be a person doing it.

We turn jobs that are done by hand into something written down and repeatable, so a holiday or a resignation does not stop them.

Most automation work starts with one of these.

  1. Every request for an account or an environment waits for the one person who knows how.
  2. New starters are given a copy of their predecessor's access.
  3. Flows built by people who have since left are still running.

If one of these is happening in your business, tell us which one and we will start there.

Contact us

What we take on.

What we report back

We report what ran, what it changed and where it stopped.

  1. A new starter gets their account, groups, mailbox and licence from one request.
  2. Leavers lose access on the day, with what they held recorded first.
  3. We run changes across hundreds of accounts from one checked list.
  4. Approvals go to a named person, and each decision is recorded.
  5. We define environments in Bicep or Terraform, so they can be rebuilt from the same files.
  6. Every deployment goes through a reviewed pipeline in Azure DevOps or GitHub.
  7. We give each Power Platform flow a named owner and bring it under a written policy.

Six jobs that are still being done by hand.

Each of these began as a one-off favour and has been part of someone's job ever since.

1 of 6

Setting up a new starter

By hand

They are given a copy of a colleague's access, including rights nobody chose for them.

From one definition

They start with what their role needs and nothing copied from anyone else.

Somebody changing role

By hand

They gain the new role's access and keep the old role's too.

From one definition

The old role's access comes off in the same step that gives them the new one.

Somebody leaving

By hand

Their access stays until it is noticed, and there is no list of what they had.

From one definition

Nothing of theirs still works the day after they leave.

A change that touches hundreds of accounts

By hand

It is done one account at a time over a couple of weeks, and staff find the mistakes when something stops working.

From one definition

Every account gets the same change in one run.

Building an environment

By hand

Each one is built by hand in the portal, so no two come out quite the same.

From one definition

Building it a second time gives you the same environment.

Getting a change into production

By hand

Someone makes the change straight in production, and nothing records what they did.

From one definition

For any change in production, you can see who reviewed it and when it went in.

Often nobody can say who set up the last new starter, and nothing written down records what access they were given.

Automating a process nobody has agreed.

What usually happens

The slowest request gets a flow, and it goes live because the demo worked.

Why that is the wrong answer

Nobody wrote down who is allowed to approve, so the flow approves everything until an audit finds it.

What we do instead

We write the process down first, including who approves and what happens to exceptions, and then build the flow.

Questions we get asked.

Usually not. Flows that work are given an owner and left running, and we start with the ones nobody can explain.

It is about the hours your staff spend doing these jobs by hand. If you want to reduce headcount as well, tell us, because it changes what is worth building.

It depends on whether the system has an API or another supported way to connect to it. We check that and tell you before you pay for anything.

You keep it. Everything is written down and stored in your own repository, and none of it needs us to keep running.

Where this page sits.

Our work sits in three layers, and each one depends on the one beneath it. The page you are reading is marked.

You are hereAutomation & Platform Engineering

Start with what is being done by hand today.

The Fortnight is a fixed-scope look at your estate. It lists the accounts that still belong to people who have left, and who is allowed to create new ones.

You get a written scope before you commit to anything.