Rename, generalize, and time-agnostic the User Template “Offboard” button

Context: The button next to user properties is “Offboard” and only runs the offboard templates.

Request 1: Rename to something like “Apply user template” and open a selector so admins can choose any user template (offboard, compromised account, or other custom user template) from a dropdown.

Request 2: When a template is chosen, run it with the existing template engine and actions so behavior stays the same, but the entry point is a general “apply workflow to user” action instead of offboarding-only.

Request 3: Add a “run now” option so user templates (e.g. compromised account) can run immediately without per-action date/time scheduling.

Request 4: Add an option for one global execution date/time per template instead of per-action times.

Request 5: Let admins set an exact execution time on the chosen date per User Template, instead of Per Action. 

Request 6: Show scheduled offboarding on the user record (e.g. banner or status: “Offboarding scheduled for Date/Time”).

Request 7: Keep “Stop offboarding” but make it explicit that it cancels the pending template run and returns the user to normal.

10

Comments (2 comments)

2
Avatar
Brandon Sardelli

Additional feature request context: User Template Enhancements 

  • Turn the current “offboarding” flow into a general “Apply user template” action so admins can run any user template (offboard, compromised account, or custom) from one place, with clearer scheduling, actions, and visibility
  • Flow: MSP Level > User Templates > Generate User Template (Offboard, Onboard, Compromised Account, etc.) > Assign to one or many customer accounts > Navigate to Users > Apply User Template > Select from a dropdown the template of choice > Select “Run Now” or use the designated time per action > After, have the ability to Stop Pending User Template inside the Properties of that user

1. Generalize the selector (rename + template selector)

  • Rename the action to something like “Apply user template” so it’s not tied to offboarding only.
  • Add a template selector: when the action is used, open a dropdown (or equivalent) where the admin picks the user template to run (e.g. Offboard, Compromised account, or any other custom user template), have a confirmation window that says “Run this template immediately" or just click Ok to confirm the selection and apply the template to the user 
  • Reuse existing behavior: once a template is chosen, run it through the existing template engine and actions. Only the entry point changes: “apply workflow to this user” action instead of an offboarding-only flow

2. Template Design 

  • Two options available: 
  • Option 1 (general time control): Select one execution time that applies to all actions in the template (one button / one setting for the whole template)
  • Option 2 (granular time control): Continue setting an execution time per action as today

2. Applying the template

  • Run immediately: “Run now” so templates (e.g. compromised account) can run immediately, without relying on the per action times to execute at their given intervals
  • Run the original template design: Apply the user template at the defined date and time set at the template level. All actions in the template run in their designated times
  • When the template is configured for it, per-action execution times still apply, similar to current User Template behavior. Otherwise, the “Run this template now” option provides instant execution.

3. Visibility on the user record

  • When a user template is scheduled but not yet run, show that on the user record (e.g., inside Properties, add an object or section called “User Templates” that shows the template name and time to execute. That makes it visible a workflow is pending for that user)

4. Cancelling a scheduled run

  • From Properties > User Templates > Pending User Templates > Cancel: the action cancels and removes the pending template run for that user and returns the user to normal (no further scheduled actions from that template)
5
Avatar
Benjamin Gaudette

I'm going to piggyback on that, so we have a single feature request for user offboarding.

Our need : 

  • Automatic move of the Active Directory account to a “Disabled” OU
  • Automatic renaming of the Active Directory account (e.g., adding “disabled” to the name)
  • Ability to set the offboarding time directly in the task (with a “Now” option to execute immediately), instead of in the user template
  • In the template, the possibility to have manual tasks to be performed; to indicate tasks to be completed outside of Nerdio

Please sign in to leave a comment.