sync: auto-sync from GURU-5070 at 2026-06-05 16:44:08

Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-05 16:44:08

clients/rswolkin/session-logs/2026-06-05-julie-guda-provisioning.md

@@ -0,0 +1,41 @@
+# rswolkin.com — Tenant Onboarding + Julie Guda Provisioning
+
+## User
+- **User:** Mike Swanson (mike)
+- **Machine:** GURU-5070
+- **Role:** admin
+- **Date:** 2026-06-05
+
+## Summary
+Onboarded the rswolkin.com M365 tenant into ACG's ComputerGuru app suite (365 tools), then provisioned a new user — Julie Guda — as Robert Wolkin's executive assistant, at Winter's request.
+
+## Tenant
+- **Org:** Wolkin, Robert
+- **Domain:** rswolkin.com (primary, verified) / rswolkin.onmicrosoft.com
+- **Tenant ID:** ceb6dbe7-82c8-4d8f-9c6b-49aa26208e9b
+- **Onboarded:** 2026-06-05 — all 5 apps consented, directory roles assigned (Tenant Admin = Conditional Access Administrator; Security Investigator + Exchange Operator = Exchange Administrator; User Manager = User Administrator + Authentication Administrator). No MDE license → Defender Add-on skipped. Recorded in `.claude/skills/remediation-tool/references/tenants.md`.
+- **Existing users (pre-Julie):** Mike Swanson `admin@rswolkin.onmicrosoft.com` (ACG admin, unlicensed); Robert Wolkin `robert@rswolkin.com` (Exchange Standard).
+- **Licenses:** O365 Business Premium had 1 free seat (now used by Julie); Exchange Standard fully consumed.
+
+## Julie Guda — account
+- **UPN / sign-in:** julie@rswolkin.com
+- **Object ID:** acaeb49c-6264-4d7e-bf10-d1cda6049b10
+- **Initial password (customer-requested):** Jaylen0607!  (forceChangeAtNextSignIn = false)
+- **License:** O365 Business Premium (skuId f245ecc8-75af-4f8e-b61f-27d8114de5f3)
+- **Usage location:** US
+- **Recovery email (otherMails):** JulieAnneGuda@gmail.com
+- **Mobile:** 702-624-3765 (also pre-registered as MFA phone method, id 3179e48a-750b-4051-897c-87b9720928f7)
+
+## Access granted (EA for Robert Wolkin)
+- **Robert's Calendar:** Julie = Editor + Delegate (receives/manages meeting requests)
+- **Robert's Contacts:** Julie = Editor
+- **Send-on-Behalf:** robert@rswolkin.com GrantSendOnBehalfTo includes Julie (messages appear "Julie Guda on behalf of Robert Wolkin")
+
+## Pending / tomorrow
+- Confirm with Winter/Robert whether EA should have **Send As** (appear purely as Robert) instead of/in addition to Send-on-Behalf, and whether she needs **Full Access** to triage Robert's inbox.
+- Optional baseline breach/hygiene sweep of the tenant (inbox rules, forwarding, OAuth consents, risky sign-ins) now that it's onboarded.
+- Verify Julie's first sign-in + MFA enrollment went smoothly.
+
+## Reference
+- Apps/tiers + scripts: `.claude/skills/remediation-tool/` (get-token.sh, onboard-tenant.sh). Tenant tracker: `references/tenants.md`.
+- Tools used: User Manager (create/license/MFA), Exchange Operator (folder perms, send-on-behalf), Security Investigator (read/verify).