sync: auto-sync from ACG-TECH03L at 2026-04-18 10:17:42

Author: Howard Enos
Machine: ACG-TECH03L
Timestamp: 2026-04-18 10:17:42
This commit is contained in:
2026-04-18 10:17:43 -07:00
parent 6a135ac111
commit d2e375df8a
7 changed files with 697 additions and 0 deletions

View File

@@ -24,6 +24,16 @@
**Note:** Business Standard is fully allocated (34/34, 0 available). Any new hires require purchasing additional licenses.
### Planned expansion — caregiver rollout (not yet purchased)
Separate from the current 34 users, there are **~39 caregivers / med techs / CCGs** with no current AD or M365 account who need identities + Conditional Access in order for the shared-phone + HIPAA story to actually work. Full roster, proposed UPNs, license math, and CA policy design are in `docs/cloud/caregiver-m365-p2-rollout.md`. Rough target: 61 total Business Premium licenses (23 existing staff post-cleanup + 38 net-new caregivers; Christine Nyanzunda overlaps and stays at one account). **Do not create any of these accounts yet** — documentation + proposal update first.
### Staff-side P2 / anti-impersonation tracking
These are in-flight and feed the same Business Premium purchase decision:
- `docs/cloud/p2-staff-candidates.md` — office staff who need P2 for PHI-in-email or home-access scenarios (Crystal confirmed Megan/Crystal/Tamra; John Trozzi gathering the rest)
- `docs/cloud/m365-impersonation-protection.md` — Defender anti-impersonation trusted partners + protected users (Megan's partner list captured; awaiting John's additions)
## AD ↔ M365 Account Mapping
### Matched Accounts (AD user → M365 mailbox)