A locked account needs identity checks. A lost laptop needs a containment decision. The analyst needs a clear handoff before taking an action that affects the user or device.
Use the ticket and asset context to distinguish routine recovery from a request that needs a security owner or approval.
01
Verify the account
Diagnose lockouts and route recovery through the appropriate identity checks and handoff.
02
Contain a lost device
Coordinate containment and send the wipe decision to the responsible team.
03
Route exceptions and departures
Review URL allowlist requests for risk and assign outstanding access tasks during employee offboarding.
Choose one frequent request and trace the checks, decisions and handoffs that take it through to resolution.
Talk to an expert
