# rswolkin.com — Tenant Onboarding + Julie Guda Provisioning

## User
- **User:** Mike Swanson (mike)
- **Machine:** GURU-5070
- **Role:** admin
- **Date:** 2026-06-05

## Summary
Onboarded the rswolkin.com M365 tenant into ACG's ComputerGuru app suite (365 tools), then provisioned a new user — Julie Guda — as Robert Wolkin's executive assistant, at Winter's request.

## Tenant
- **Org:** Wolkin, Robert
- **Domain:** rswolkin.com (primary, verified) / rswolkin.onmicrosoft.com
- **Tenant ID:** ceb6dbe7-82c8-4d8f-9c6b-49aa26208e9b
- **Onboarded:** 2026-06-05 — all 5 apps consented, directory roles assigned (Tenant Admin = Conditional Access Administrator; Security Investigator + Exchange Operator = Exchange Administrator; User Manager = User Administrator + Authentication Administrator). No MDE license → Defender Add-on skipped. Recorded in `.claude/skills/remediation-tool/references/tenants.md`.
- **Existing users (pre-Julie):** Mike Swanson `admin@rswolkin.onmicrosoft.com` (ACG admin, unlicensed); Robert Wolkin `robert@rswolkin.com` (Exchange Standard).
- **Licenses:** O365 Business Premium had 1 free seat (now used by Julie); Exchange Standard fully consumed.

## Julie Guda — account
- **UPN / sign-in:** julie@rswolkin.com
- **Object ID:** acaeb49c-6264-4d7e-bf10-d1cda6049b10
- **Initial password (customer-requested):** Jaylen0607!  (forceChangeAtNextSignIn = false)
- **License:** O365 Business Premium (skuId f245ecc8-75af-4f8e-b61f-27d8114de5f3)
- **Usage location:** US
- **Recovery email (otherMails):** JulieAnneGuda@gmail.com
- **Mobile:** 702-624-3765 (also pre-registered as MFA phone method, id 3179e48a-750b-4051-897c-87b9720928f7)

## Access granted (EA for Robert Wolkin)
- **Robert's Calendar:** Julie = Editor + Delegate (receives/manages meeting requests)
- **Robert's Contacts:** Julie = Editor
- **Send-on-Behalf:** robert@rswolkin.com GrantSendOnBehalfTo includes Julie (messages appear "Julie Guda on behalf of Robert Wolkin")

## Pending / tomorrow
- Confirm with Winter/Robert whether EA should have **Send As** (appear purely as Robert) instead of/in addition to Send-on-Behalf, and whether she needs **Full Access** to triage Robert's inbox.
- Optional baseline breach/hygiene sweep of the tenant (inbox rules, forwarding, OAuth consents, risky sign-ins) now that it's onboarded.
- Verify Julie's first sign-in + MFA enrollment went smoothly.

## Reference
- Apps/tiers + scripts: `.claude/skills/remediation-tool/` (get-token.sh, onboard-tenant.sh). Tenant tracker: `references/tenants.md`.
- Tools used: User Manager (create/license/MFA), Exchange Operator (folder perms, send-on-behalf), Security Investigator (read/verify).