User & Access Management
The right people in, everyone else out, on the day it changes.
Former staff with working logins, shared admin passwords and no multi-factor authentication are how most small businesses get breached. We set up identity properly in Microsoft 365 or Google Workspace, then handle joiners, movers and leavers so access always matches who works for you.
Schedule 1
What is included
- D-2.1
Directory and single sign-on
One account per person in Microsoft Entra ID or Google Workspace, with single sign-on to the other apps you use.
- D-2.2
Multi-factor authentication
MFA for everyone, phishing-resistant methods for admins, and a recovery process that does not depend on one phone.
- D-2.3
Onboarding and offboarding
A checklist for every start and exit: accounts, licences, mailboxes, shared drives and devices, done the same day.
- D-2.4
Roles and permissions
Groups and roles instead of one-off grants, and a regular review of who can see what.
- D-2.5
Password management
A business password manager with shared vaults, so credentials stop living in spreadsheets and chats.
Schedule 2
Typical projects
- Cleaning up accounts after years of growth
- Turning on MFA without locking anyone out
- Moving from personal email to your own domain
- Same-day offboarding when someone leaves
Materials
- Microsoft 365
- Entra ID
- Google Workspace
- Okta
- 1Password
- Bitwarden
Schedule 3
How it runs
- 01
Review · first visit
We look at what is there (network, accounts, devices, servers and backups) and at what is at risk, and you get the findings in writing.
- 02
Plan · in writing
A prioritised list of fixes with a fixed price for the first set, and a monthly plan if you want ongoing care.
- 03
Fix · scheduled
Changes made in agreed maintenance windows, outside your working hours where they could interrupt anyone, with a way back for anything risky.
- 04
Document · handover
Diagrams, an inventory, and admin credentials in your own password manager, so anyone could take over.
- 05
Look after · optional
Monitoring, patching and support on a monthly plan, or nothing: the documentation means you never need us to keep the lights on.
Schedule 4
Common questions
Can you move us from one email platform to another?
Yes: mailboxes, calendars, contacts and shared drives, planned so the cut-over happens outside working hours.
Who keeps the admin passwords?
You do. Admin accounts are in your organisation’s name and your password manager, and we work through delegated access that you can revoke.