Before
Teams likely had to retrieve the latest Eng-tagged device inventory, review the existing application access list, and compare serial numbers manually. They then had to add or remove devices individually and notify the team about the changes.
How it works
- On schedule, retrieve Eng-tagged computer records and the current application access-list entries.
- Compare the two serial-number sets to identify missing authorized devices and outdated list entries.
- Add or remove devices as needed, then post the update counts to the designated team channel.
Workflow details
- Scheduled synchronization: The workflow runs on a predetermined schedule, such as multiple times per day, weekly, monthly, or annually, without requiring a manual launch.
- Asset collection: It retrieves computer inventory records filtered by the Eng asset tag and extracts their serial numbers as the current set of authorized devices.
- Access-list review: It retrieves the existing application access lists and the serial numbers currently contained in the relevant list.
- Automated comparison and updates: A script compares the asset inventory with the current access list, identifies devices missing from either set, and conditionally adds newly authorized devices or removes entries no longer present in the asset inventory.
- Operational notification: After the list changes are processed, the workflow sends a channel message summarizing how many devices were appended and removed.
What changed
The access list is now reconciled automatically on a recurring schedule using the latest asset inventory. Additions, removals, and the resulting change counts are handled and communicated without a separate manual comparison and handoff.
Work removed
Manually collecting Eng-tagged device records, reviewing access-list entries, comparing serial numbers, adding new devices one by one, removing outdated devices one by one, and composing the change notification.
Expected outcome
Each scheduled run replaces at least one manual access-list review and applies the required per-device additions or removals, while providing a direct change summary to the team.
