Skip to content
Get packs

Identity Governance Lifecycle Process

Designs joiner-mover-leaver identity lifecycle automation and access reviews for enterprise IGA platforms

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
3 files

What it does

This skill guides an AI agent through designing how a company manages who has access to which systems, from hiring through job changes to departure. It supplies a lifecycle model (pre-hire, active, role change, leave, terminated, rehire, deleted) with the automated actions for each stage, plus guidance on role mining, access requests, periodic recertification and cleaning up orphaned accounts of former staff. It also includes a helper script that can list Microsoft Entra ID users and flag inactive accounts.

Great for

  • IT and security teams planning or automating joiner-mover-leaver provisioning
  • Compliance staff documenting identity lifecycle controls for SOX, HIPAA or GDPR
  • Administrators cleaning up access left behind by former employees

Skip it if

  • Managing a single application's users, since the skill targets cross-system identity processes (the skill itself says so)
  • Running it against a live production tenant without review: the script reads user data and the lifecycle rules can disable accounts and revoke access, so mistakes affect real people

Try asking

  • “Design a joiner-mover-leaver automation workflow that ties our Workday HR feed to Entra ID and Okta”
  • “Help me find orphaned accounts of employees terminated more than 90 days ago and build a remediation plan”
  • “Draft a quarterly access recertification process to meet our SOX requirements”
  • “Outline the leaver steps: what to disable, revoke, and archive when someone resigns”
Step-by-step guide: how to use Identity Governance Lifecycle ProcessInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the Apache-2.0 licence and an attribution note.

    building-identity-governance-lifecycle-process.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip building-identity-governance-lifecycle-process.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip building-identity-governance-lifecycle-process.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Read the lifecycle rules and retention periods before applying any of them, and test in a non-production tenant first
  • Keep the client secret out of prompts and files; use a secrets manager and least-privilege Graph permissions
  • Have HR, IT, security and legal review retention and deletion periods before automating them

What's inside

  • references/api-reference.md
  • scripts/agent.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.