JML

1. Choose request type

2. Fill request information

Requester Requester email

Type at least 2 characters to suggest internal users.

Requester name

Enter requester email to look up the internal user.

Employee Full name * Requested username

Type a full name to suggest an available 3-character username.

Current username * Company * Department / team Job title / role Manager / responsible

Type at least 2 characters to suggest internal users.

Select a manager/responsible from internal Entra users.

Start date * Last working day * Disable date/time

Access to create

Email mailbox Domain / AD account Teams / groups RDS / Terminal Server File shares

File share access

Sales files for the selected company. Choose one permission: view-only or edit access. This default list is separate from the live Entra Groups search below.

Select a company and check File shares to choose view-only or edit access.

Access automation (Phase 1)

Generate a PowerShell script for IT review/manual execution. The web app will not run scripts automatically.

Access mode

Source user to copy from

Type part of a name, UPN, or email, then search.

No source user selected yet.

Approved/static catalog

Loading catalog…

Live Entra groups

Search and add actual Entra groups to this request. Selected groups are included in the review and generated PowerShell comments.

Search Entra groups

No group search run yet.

No Entra groups selected yet.

Equipment

Choose equipment, then fill the relevant details below. Detail choices stay visible to avoid the form jumping while you click.

Laptop Phone SIM / mobile subscription

Laptop size

14" (without numpad) 16"

Phone type

iPhone Android

Android brand

Samsung OnePlus

Mobile number

Move own number in Need new number

Access to remove / handover

Disable AD/O365 account Remove Microsoft 365 licenses Convert mailbox to shared mailbox Forward email Set automatic replies Remove groups / Teams Revoke sessions / MFA tokens Remove VPN/RDS/app access

Mailbox / OneDrive handover target Equipment to return

Notes Additional notes

3. Review

Fill the form and click Review.

Settings

Protected configuration for integrations. Enter the settings password to edit Entra setup.

Settings password

Settings are locked.

Entra read-only setup

Store a Microsoft Graph read-only app registration for user/group lookup. Values are encrypted at rest and hidden after save.

Read-only Graph app Tenant ID or domain Client ID Client secret

Required Graph application permissions: User.Read.All, Group.Read.All, GroupMember.Read.All. No write permissions are needed for this Phase 1 setup.

Loading Entra setup status…

IT

Protected IT queue and read-only Entra user/group lookup.

IT password

IT is locked.

Entra users and groups

Search live Microsoft Graph data using the saved read-only setup. Results are read-only and used for review/template selection only.

Find user

No user search run yet.

Find group

No group search run yet.

IT queue

Newest requests first. Generate scripts for review/manual execution or mark completed when IT is done.