Automation Catalog · ships with the platform
Already built. Ready to run.
The work every desk repeats (password resets, mailbox delegation, server reboots, endpoint fixes, onboarding), as automation flows that ship with the platform. No agent to design, no flow to chart: approval-gated, fully audited, live from day one.
A catalog flow in action: self-serve, executed end-to-end, audited.
Platform flows for the universal repeat work. Connect your directory and go, nothing to build.
50 production-ready agents across 12 domains. Clone in one click, tune, publish as your own.
BuildAgent StudioDescribe the outcome in plain language: Studio drafts the agent, tools, gates and success criteria.
Coming soonCreator StudioDescribe an automation conversationally: one build runs in Sidekick, Voice and Agent Studio. Until then, we build it for you.
Identity & Access
6 flowsLockouts, resets and group changes executed against the directory, approval gates scale to the sensitivity of the action.
Unlock Account / Reset Password
Self-serveUnlock and/or reset password, force change at next logon, run AAD Connect sync.
Find User Lockout Source
Queries Event 4740 on the PDC, then 4625 on the source machine, to identify the stale mapped drive, cached credential, scheduled task or service behind repeat lockouts.
MFA Reset
Self-serveResets device registration and factors; the Okta variant supports single-factor deletion or a full reset.
Add / Remove User from Group
Self-serveSingle user or bulk CSV, with optional time-bound expiration on membership.
Get BitLocker Recovery Key
Looks up the correct directory based on management source, returns the key with an audit trail, optional auto-rotate after use.
Account Expiration Reminder
Scans at 30/14/7/1 days, notifies user and manager, with an inline “extend” option.
Exchange & Mail
6 flowsMailboxes, delegation, DLs and message traces: Exchange Online and on-prem Server, owner- and manager-gated.
Distribution List Management
Add or remove members, create new DLs, bulk CSV supported.
Create Shared Mailbox
Provisions the mailbox, sets Full Access and Send As, optional hide-from-GAL and DL attachment.
Delegate Mailbox Access
Full Access / Send As / Send on Behalf, with a calendar-delegate variant and automap toggle.
Find Email Messages (Message Trace)
Trace by sender, recipient, subject or date; aggregates transport hops for on-prem.
Set Out-of-Office
Self-serveInternal and external messages with date ranges; reused as an offboarding sub-step.
Global Email Whitelist
Tenant-wide allow-list addition with full audit.
Server & Infrastructure
3 flowsPower actions and print queues inside change windows: from inside the guest, or at the hypervisor.
Reboot Server
Graceful reboot from inside the guest.
Start / Stop / Reboot VM
Hypervisor-level power action for unreachable guests or scheduled maintenance.
Print Server Queue Management
Restart the spooler, clear the queue for a specific printer, view printer config, server-side.
SharePoint
1 flowSite permissions with granular inheritance control, down to a single library or folder.
Add / Remove SharePoint Site Permissions
Owners/Members/Visitors group changes, with optional break/restore inheritance on a specific library or folder, without affecting the parent site.
Licensing
1 flowLicense moves that report pool availability after every change, cost control built in.
Remove / Assign / Update User License
Direct or group-based licensing; returns real-time pool availability after every change.
Endpoint Diagnostics & Remediation
10 flowsJust-in-time flows that run on the user's own device: no remote session, no queue.
OneDrive Sync Issues
Self-serveCheck sync status and stuck/paused files; restart OneDrive; clear the sync cache; run a reset if corruption is detected; verify sign-in and tenant config; report known blockers like long paths, invalid characters and file locks.
Audio / Meeting Device Issues
Self-serveEnumerate playback and recording devices; detect current default vs. expected meeting-app device; reset default I/O; check muted devices, disabled drivers and app-level permissions; restart the Windows Audio service.
Printer Issues (Endpoint)
Self-serveCheck the local print spooler and restart if stuck; clear stuck jobs; detect offline printers; verify driver status and re-enumerate installed printers; test connectivity to the print server or network printer.
Outlook Opening Issues (Clear Cache)
Self-serveKill hung Outlook processes; clear RoamCache, auto-complete and OST staging; detect a corrupt profile and offer reset; launch in safe mode to isolate add-ins; check Exchange/M365 connectivity.
VPN Connection Diagnostics
Self-serveCheck VPN client status and version; restart the VPN adapter and related network services; clear cached VPN credentials; test reachability to gateway and internal endpoints; validate split-tunnel routes and DNS resolution.
General Computer JIT Diagnostic
Self-serveRAM usage and top memory consumers; stuck apps; disk usage and free space per drive; SMART disk health; Windows Update status and pending reboots.
Disk Cleanup / Free Up Space
Self-serveInventory space by category (temp, cache, Windows.old, hibernation, old drivers); clear user and system temp files; clean browser and app caches; empty the Recycle Bin with user confirmation; report space reclaimed.
Mapped Drives Reconnection
Self-serveList configured mapped drives and status; detect disconnected shares; re-authenticate and reconnect; clear stale cached credentials from Credential Manager; verify network path and DNS resolution to the file server.
Software Install / Uninstall
Self-serveCompany-approved apps only: pull from the internal catalog; silent install with the correct version and flags; verify install and register with inventory; clean uninstall including leftover registry keys and folders; report status to user and IT.
Teams Cache Diagnostics
Self-serveDetect classic Teams, New Teams, or both; kill running processes; clear the cache from the correct path per variant; reset sign-in state if auth is stuck; relaunch and verify startup.
User Lifecycle
2 flowsHR-triggered onboarding and staged offboarding: disable, then delete, with retention enforced throughout.
Onboard a User
Creates the AD user from a role template and syncs to Entra; assigns licenses and group memberships; provisions the mailbox and enrolls the device in Intune; provisions workplace apps (Slack/Zoom/SaaS); pushes the record to the HR repo.
Offboard a User
Staged disable-then-delete: disables the account and strips groups; converts the mailbox to shared with manager delegation; delegates OneDrive and wipes/removes devices; deprovisions workplace apps; extends retention per policy.
Beyond the catalog
Need something the catalog doesn’t cover?
The catalog covers the work every desk shares. For everything specific to yours, our team builds the automation for you: end-to-end, during onboarding, using the same internal AI tooling that powers Creator Studio: the conversational builder, coming soon, where your own team will create automations that run across Sidekick, Voice and Agent Studio. Governed and audited either way.