← All projects

Automation Engineer

IAM Automation with Graph API

Python tooling on top of Microsoft Graph that automates joiner-mover-leaver, group hygiene and orphan account reporting.

  • Python
  • Microsoft Graph API
  • MSAL
  • Azure Functions
  • Key Vault

Architecture

CSV / APIsecretsMSAL tokenHR SystemEvent QueueAzure FunctionKey VaultMicrosoft GraphEntra IDLog Analytics

Overview

A small CLI + scheduled Function App that consumes HR feed events and translates them into Graph API calls — creating users, assigning licenses, joining group sets and revoking access on leaver.

Secrets are sourced from Key Vault using a managed identity; no long-lived credentials live in code or pipelines.

What it automates

  1. Joiner: account creation, license assignment, baseline group membership, manager-driven entitlements.
  2. Mover: differential group recalculation when department or role changes.
  3. Leaver: disable, revoke sessions, reset password, move to leavers OU, schedule deletion at +30 days.
  4. Weekly orphan-account and stale-group reports posted to a Teams channel.