sync: auto-sync from HOWARD-HOME at 2026-07-01 14:43:57
Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-07-01 14:43:57
This commit is contained in:
@@ -77,6 +77,15 @@ Disable 7 leavers + 1 Lassey dup = 8 seats freed; 4-5 new hires need seats
|
||||
Passwords DM'd to Howard (Discord msg 1521981205443117116).
|
||||
- [x] Verified: 8 offboarded = accountEnabled=false + 0 licenses; 4 new = SPB licensed.
|
||||
SG-Caregivers = 35 members. SPB pool: 45 enabled / 41 consumed (4 free).
|
||||
- [x] **Phone-login verification + CA cutover (2026-07-01, Howard's go):** all 35
|
||||
SG-Caregivers members verified enabled/unlocked in AD and enabled/licensed in
|
||||
Entra (cloud group synced, 4 new hires present). Root cause of would-be login
|
||||
failure found and fixed: (1) `Require MFA for all users` excluded only the stale
|
||||
pilot group — added `SG-Caregivers` (8b8d9222) to excludeGroups, break-glass
|
||||
preserved; (2) `CSC - Block caregivers on non-compliant device` DISABLED (phones
|
||||
are Intune-noncompliant; interim posture = caretakers on desktops + phones,
|
||||
on-network only). Allow-list policy left test-scoped. Phones-only lockdown
|
||||
deferred — tracking list: `docs/cloud/caretaker-phones-only-list.md`.
|
||||
- [ ] ALIS: create staff records for Munezero/Cota/Robinson (need job roles:
|
||||
Certified vs Resident Caregiver); Vallejo exists — set Email=a.vallejo@ (UPN).
|
||||
Import .xls via `alis` skill `build-import`.
|
||||
|
||||
Reference in New Issue
Block a user