sync: auto-sync from HOWARD-HOME at 2026-07-01 14:43:57

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-01 14:43:57
This commit is contained in:
2026-07-01 14:44:29 -07:00
parent 142afd7e98
commit 875048f9ad
3 changed files with 82 additions and 2 deletions

View File

@@ -77,6 +77,15 @@ Disable 7 leavers + 1 Lassey dup = 8 seats freed; 4-5 new hires need seats
Passwords DM'd to Howard (Discord msg 1521981205443117116).
- [x] Verified: 8 offboarded = accountEnabled=false + 0 licenses; 4 new = SPB licensed.
SG-Caregivers = 35 members. SPB pool: 45 enabled / 41 consumed (4 free).
- [x] **Phone-login verification + CA cutover (2026-07-01, Howard's go):** all 35
SG-Caregivers members verified enabled/unlocked in AD and enabled/licensed in
Entra (cloud group synced, 4 new hires present). Root cause of would-be login
failure found and fixed: (1) `Require MFA for all users` excluded only the stale
pilot group — added `SG-Caregivers` (8b8d9222) to excludeGroups, break-glass
preserved; (2) `CSC - Block caregivers on non-compliant device` DISABLED (phones
are Intune-noncompliant; interim posture = caretakers on desktops + phones,
on-network only). Allow-list policy left test-scoped. Phones-only lockdown
deferred — tracking list: `docs/cloud/caretaker-phones-only-list.md`.
- [ ] ALIS: create staff records for Munezero/Cota/Robinson (need job roles:
Certified vs Resident Caregiver); Vallejo exists — set Email=a.vallejo@ (UPN).
Import .xls via `alis` skill `build-import`.