admin

Employee Onboarding and Offboarding Process

Below is a typical enterprise employee onboarding and offboarding process covering HR, IT, Security, Facilities, Finance, Legal, and the employee’s manager. 1. Employee Onboarding Process Purpose The onboarding process ensures a new employee, contractor, or intern is properly hired, verified, equipped, trained, and granted the right access before starting

IT Management Guide

1. Purpose This guide defines a minimal but effective IT management process for a startup company developing AI solutions. The goal is to establish practical IT operations, security, and compliance processes that support SOC 2 and ISO 27001 readiness without creating unnecessary enterprise overhead. This guide covers: * Microsoft 365 or

SOP — Create and Manage Microsoft Azure for Enterprise

Version 1.0 Date 2026-06-22 Domain mptwork.com Model Identity rooted in the existing Microsoft Entra tenant; hierarchy of Management Groups → Subscriptions → Resource Groups → Resources Consoles Azure portal portal.azure.com · Entra admin center entra.microsoft.com Companion SOPs M365/Entra — sop-subscribe-manage-m365-mptwork.md, sop-entra-id-authentication-sso-mptwork.md · Network/IPAM — enterprise-ipam-reference-architecture.md · AWS

SOP — Create and Manage a Google Cloud (GCP) Account

Version 1.0 Date 2026-06-22 Domain mptwork.com Model GCP Organization rooted in Cloud Identity / Google Workspace for mptwork.com; hierarchy of Folders → Projects; workforce access via Google Groups, optionally federated to Microsoft Entra Companion SOPs Google Workspace — sop-subscribe-manage-google-workspace-mptwork.md · Entra auth & SSO — sop-entra-id-authentication-sso-mptwork.md · Network/IPAM — enterprise-ipam-reference-architecture.md

SOP — Create and Manage an AWS Cloud Account

Version 1.0 Date 2026-06-22 Domain mptwork.com Model AWS Organizations multi-account (management account + member accounts), workforce access via IAM Identity Center federated to Microsoft Entra / Google Companion SOPs Entra auth & SSO — sop-entra-id-authentication-sso-mptwork.md · Google Workspace — sop-subscribe-manage-google-workspace-mptwork.md · Network/IPAM — enterprise-ipam-reference-architecture.md Goal: stand up AWS for MPT Work

SOP — Subscribe to and Manage Jira & Confluence for Enterprise

Version 1.0 Date 2026-06-22 Domain mptwork.com Products Jira + Confluence (Atlassian Cloud), managed in the Atlassian organization at admin.atlassian.com Identity Atlassian Guard + two IdP directories: Microsoft Entra and Google Workspace (SAML SSO + provisioning) Companion SOPs Entra auth & SSO — sop-entra-id-authentication-sso-mptwork.md · Google Workspace — sop-subscribe-manage-google-workspace-mptwork.md Goal: stand

SOP — Subscribe to and Manage Jira & Confluence for Enterprise

Version 1.0 Date 2026-06-22 Domain mptwork.com Products Jira + Confluence (Atlassian Cloud), managed in the Atlassian organization at admin.atlassian.com Identity Atlassian Guard + two IdP directories: Microsoft Entra and Google Workspace (SAML SSO + provisioning) Companion SOPs Entra auth & SSO — sop-entra-id-authentication-sso-mptwork.md · Google Workspace — sop-subscribe-manage-google-workspace-mptwork.md Goal: stand

SOP — Subscribe to and Manage GitHub for Enterprise

Version 1.0 Date 2026-06-22 Domain mptwork.com Deployment GitHub Enterprise Cloud with an enterprise account mptwork (github.com/enterprises/mptwork) Identity model Enterprise Managed Users (EMU) — accounts created/controlled via Microsoft Entra (SAML + SCIM) Companion SOP Entra ID authentication & SSO — sop-entra-id-authentication-sso-mptwork.md Goal: stand up GitHub so every

SOP — Subscribe to and Manage GitLab

Version 1.0 Date 2026-06-22 Domain mptwork.com Deployment GitLab.com (SaaS) with a top-level group mptwork (gitlab.com/mptwork) Identity SAML SSO + SCIM via Microsoft Entra (consistent with the Entra SOP) Companion SOP Entra ID authentication & SSO — sop-entra-id-authentication-sso-mptwork.md Goal: stand up GitLab for MPT Work so that

SOP — Subscribe to and Manage Endpoint Devices with Sophos

Version 1.0 Date 2026-06-22 Tenant context mptwork.com · Sophos Central console central.sophos.com Product Sophos Endpoint (powered by Intercept X), managed in Sophos Central Companion SOPs Intune device management — sop-manage-devices-intune-mptwork.md · Jamf (macOS) — sop-manage-macos-jamf-mptwork.md Scope note: Sophos Endpoint is an endpoint security product (next-gen AV, anti-ransomware, EDR/

Runbook — Provision a New Windows Laptop with Intune

Version 1.0 Date 2026-06-22 Employee Sally Wong → swong@mptwork.com Device Windows 11 laptop (corporate, provisioned via Windows Autopilot + Microsoft Entra join) Tenant mptwork.com (mptwork.onmicrosoft.com) Consoles Intune intune.microsoft.com · M365 admin admin.microsoft.com · Entra entra.microsoft.com Companion SOPs Intune device management — sop-manage-devices-intune-mptwork.md

Runbook — Provision a New MacBook Pro with Intune

Version 1.0 Date 2026-06-22 Employee Ben Scully → bscully@mptwork.com Device MacBook Pro (corporate, enrolled via Apple Business Manager + Automated Device Enrollment) Tenant mptwork.com (mptwork.onmicrosoft.com) Consoles Intune intune.microsoft.com · M365 admin admin.microsoft.com · Entra entra.microsoft.com Companion SOPs Intune device management — sop-manage-devices-intune-mptwork.md