claudetools/clients/cascades-tucson/docs/cloud/user-access-confirmation-email-2026-04-18.md

Draft email — User + Department + Access confirmation

To: Meredith Kuhn, John Trozzi (cc: Ashley Jensen, HR) From: Howard Enos — Computer Guru Date: 2026-04-18 Subject: Please review — full staff list, department, and access (before we buy licenses / create caregiver accounts)

---

Meredith / John,

Before we purchase the Microsoft 365 Business Premium licenses and start creating caregiver accounts, I want to make sure we have every name, spelling, department, and how each person actually uses technology correct. Changing this AFTER accounts are created is painful (email addresses, phone profiles, security groups all have to be rebuilt).

Please review the list below and mark it up — corrections, additions, or removals. You can reply directly in email, print and mark up, or we can walk through it on a call. A few notes on the columns:

• Access type — how they actually use technology:
  • D = Desktop / PC only (they sit at a computer, they do not need a company phone)
  • P = Phone only (shared Android phone on shift — no personal PC at Cascades)
  • D+P = Both (desk for office work, shared phone during rounds / on the floor)
• Outside access — should this person be allowed to sign in from outside the building (home, personal cell, hotel, etc.)? Y = yes, N = no (locked to Cascades network/trusted device).
• ALIS — does this person log into ALIS? ALIS is a website they sign into; it can be connected to their Microsoft account so they do NOT get a second MFA prompt — but only if we know who needs it.

Where I've filled in best guesses I've put them in parentheses — those are the ones I most need you to confirm or correct.

---

1. Administrative

Name	Title	Access	Outside Access	ALIS
Meredith Kuhn	Executive Director	(D+P)	(Y)	(Y)
Ashley Jensen	Assistant Executive Director	(D+P)	(Y)	(Y)
Lauren Hasselman	Business Office Director	(D)	(Y)	(N)
Allison Reibschied	Accounting Assistant	(D)	(N)	(N)

2. Marketing / Sales

Name	Title	Access	Outside Access	ALIS
Megan Hiatt	Sales Director	D+P	Y (home + personal cell — handles resident intake forms)	(Y — intake PHI)
Crystal Rodriguez	Sales Associate	D+P	Y (home + personal cell — handles resident intake forms)	(Y — intake PHI)
Tamra Matthews	Move-In Coordinator	(D+P)	Y (home + personal cell) — leaving June 2026	(Y — intake PHI)

3. Care — Assisted Living (clinical / nursing)

Name	Title	Access	Outside Access	ALIS
Lois Lane	Health Services Director	(D+P)	(Y)	(Y)
Karen Rossini	Health Services Manager	(D+P)	(Y)	(Y)
Britney Thompson	Memory Care Nurse	(D+P)	(Y)	(Y)
Veronica Feller	Care, Assisted Living Aide	(P)	(N)	(Y)

Note: Britney's AD department is currently "Care, Assisted Living" but her title says Memory Care. Which department should she belong to for licensing / security group purposes?

4. Care — Memory Care

Name	Title	Access	Outside Access	ALIS
Shelby Trozzi	Memory Care Director	(D+P)	(Y)	(Y)
Christine Nyanzunda	Memory Care Admin Assistant	(D+P)	(Y — or N?)	(Y)

5. Resident Services

Name	Title	Access	Outside Access	ALIS
Christina DuPras	Resident Services Director	(D+P)	(Y)	(Y)
Cathy Kingston	Receptionist	(D — shared front desk PC)	(N)	(N)
Shontiel Nunn	Receptionist	(D — shared front desk PC)	(N)	(N)
Kyla Quick Tiffany	Receptionist — not yet in AD	(D — shared front desk PC)	(N)	(N)
Michelle Shestko	MC Receptionist	(D — shared front desk PC)	(N)	(N)
Sebastian Leon	Courtesy Patrol	(P — shared phone on rounds?)	(N)	(N)
Sheldon Gardfrey	Courtesy Patrol	(P — shared phone on rounds?)	(N)	(N)
Ray Rai	Courtesy Patrol	(P — shared phone on rounds?)	(N)	(N)

Question: Do the Courtesy Patrol staff need email at all, or just a shared-phone identity? And is the spelling Kyla Quick Tiffany (three names) correct, or is it Kyla Quick-Tiffany (hyphen) or different?

6. Life Enrichment

Name	Title	Access	Outside Access	ALIS
Susan Hicks	Life Enrichment Director	D	(Y — or N?)	(N)
Sharon Edwards	Life Enrichment Assistant	D	(N)	(N)

7. Culinary

Name	Title	Access	Outside Access	ALIS
JD Martin	Culinary Director	(D+P)	(N)	(N)
Ramon Castaneda	Kitchen Manager	(D+P)	(N)	(N)
Alyssa Brooks	Dining Manager	(D+P)	(N)	(N)

Note: The kitchen has 9 shared iPads planned (separate from the 25 shared phones). Should kitchen staff sign in on those iPads with their own account, or stay on a shared kitchen iPad identity?

8. Maintenance

Name	Title	Access	Outside Access	ALIS
John Trozzi	Maintenance Director	(D+P)	(Y)	(N)
Matt Brooks	Memory Care Receptionist	(D+P)	(N)	(Y?)

Question: Matt Brooks' HR record shows department = Maintenance but his title is Memory Care Receptionist. Which is correct? That affects where he gets filed and what he has access to.

9. Housekeeping

Name	Title	Access	Outside Access	ALIS
Lupe Sanchez (Guadalupe Sanchez)	Housekeeping Director	(D+P)	(N)	(N)

10. Transportation

Name	Title	Access	Outside Access	ALIS
Richard Adams	Driver	(P only)	(N)	(N)
Julian Crim	Driver	(P only)	(N)	(N)
Christopher Holick	Driver	(P only)	(N)	(N)

---

11. Caregivers — NEW (39 people, not yet in AD or M365)

These are the staff currently using shared workstation logins. None of them has an email account or Microsoft identity today. As part of the shared-phone + HIPAA project, each person would get their own login that gets used ONLY on the shared phones (and shared workstations via the same identity).

Default assumption for every caregiver: Phone-only (P), no outside access (N — locked to Cascades network + managed phone). Please flag anyone who should differ from that default (for example, a MedTech who also charts at a desktop would be D+P; a salaried staff member who also works from home would need outside access Y).

Tuesday–Saturday shift (15)

#	Name	Role	Location	Phone	Confirm spelling / access
1	Thelma Abainza	Caregiver	Tower	520-867-2579
2	Niel Castro	MedTech / CCG	Tower	520-697-4644
3	Espe Esperance	MedTech	Tower	520-788-9558
4	Barbara Johnson	Caregiver	Tower	520-204-3449
5	Kasey Flores	Caregiver	Memory Care	520-250-1451
6	Richard Flores	Caregiver	Memory Care	520-873-7727
7	Marie Kastner	Caregiver	Memory Care	714-576-9858
8	Bella Mendoza	Caregiver	Memory Care	520-358-2000
9	Rosa Morales	MedTech	Memory Care	312-213-8780
10	Sandra Padilla	MedTech / CCG	Tower	520-585-3317
11	Polett Pinazavala	MedTech	Memory Care	520-449-5533	Please confirm spelling
12	Whisper Reed	MedTech	Tower (overnight)	520-312-7575
13	Patricia Sandoval-Beck	MedTech	Tower	520-343-8093	Please confirm the hyphenated last name is correct
14	Charity Sika	Caregiver	Memory Care	623-251-8032
15	Ederick Yuzon	Caregiver	Tower	520-603-8816	Please confirm spelling

Sunday–Thursday shift (10)

#	Name	Role	Location	Phone	Confirm
16	Juan Andrade	Caregiver	Memory Care	520-528-4078
17	Jahmeka Clarke	MedTech	Memory Care	520-649-7034
18	Karina Aziakpo	MedTech / CCG	Memory Care (overnight)	520-392-6859
19	Jinnelle Dittbenner	Caregiver	Tower	520-499-9996
20	Christine Nyanzunda	MedTech	Memory Care (Sun/Mon AM)	520-304-4251	Same person as the Memory Care Admin Assistant above? We should only create ONE account.
21	Agnes McFerren	Caregiver	Tower	520-406-3063
22	Samuel Ramirez	Caregiver	Tower	520-488-5798
23	Erica Sanchez	Caregiver	Memory Care	520-528-3387
24	Katrina Wyzykowski	MedTech	Memory Care	520-347-1448
25	Corey Tate	Caregiver (no MedTech)	Tower (NOC)	520-535-7821

Friday–Monday / weekend (5)

#	Name	Role	Location	Phone	Confirm
26	Ashli Atwood	MedTech / CCG	Memory Care (overnight)	715-200-1295
27	Cole Johnson	MedTech	Tower	818-970-0890
28	Roseline Cooper	Caregiver	Memory Care (overnight)	520-278-6817
29	Monique Lopez	Caregiver (doubles Fri/Sat)	Tower	520-596-0969
30	Gloria Williford	MedTech (doubles Fri/Sat)	Memory Care	928-551-1682

Thursday–Monday shift (3)

#	Name	Role	Location	Phone	Confirm
31	Sarah Carroll	Caregiver	Tower	520-409-2341
32	Luke Hogan	Caregiver	Tower	520-312-0141
33	Gina Williams	Caregiver	Tower	520-612-5075

Split / partial-week (3)

#	Name	Role	Location	Phone	Confirm
34	Jen Higdon	Caregiver	Tower (M/W/F AM)	520-730-3548
35	Mary Kariuki	Caregiver	Tower (Sat–Mon + Wed PM)	520-309-1247
36	CeCe Lassey	Caregiver	Tower (Sun/Mon doubles + Tue PM)	520-248-5982

Sunday & Monday only (1)

#	Name	Role	Location	Phone	Confirm
37	Paty Doran	MedTech / CCG	Tower	520-591-7368	Is it Paty, Patti, or Patricia?

PRN / float (2)

#	Name	Role	Location	Phone	Confirm
38	Ezekiel Huerta	Caregiver (PRN)	Tower	520-591-6113
39	Maia Baker	MedTech (PRN)	Memory Care	TBD	On a secondary sheet only, not the shift list — is she still employed?

---

Things I most need you to confirm

1. Spelling corrections for any names flagged in bold above (Polett, Patricia Sandoval-Beck, Ederick, Paty, Maia, and Kyla Quick Tiffany).
2. Christine Nyanzunda — one person, or two? If one, she keeps the one existing mailbox and we just extend her to the phones.
3. Matt Brooks — department = Maintenance or Memory Care? Title = Memory Care Receptionist, but HR shows Maintenance.
4. Access type on every row (D / P / D+P) — especially: do Courtesy Patrol, receptionists, and Drivers use shared phones, shared PCs, or both? Do MedTechs / CCGs chart at a desktop as well as on the phone, or only on the phone?
5. Outside access on every row — who needs to work from home, take work email on their personal cell, or travel? The default for everyone else is in-building only, which is what HIPAA and Conditional Access would prefer.
6. ALIS access — please confirm who actually logs into ALIS. We want to tie ALIS to Microsoft sign-in so those users get a smooth single sign-on with no extra MFA prompts — but only for people who use ALIS. If you don't use it, we won't connect it.
7. Anyone missing? Reply with additions. Specifically: I don't have anyone listed under Activities/Life Enrichment outside Susan and Sharon, nor in Transportation beyond the three drivers. Are there PRN/float staff in any other department I should know about?
8. Tamra Matthews — we have her transition out in June 2026 confirmed? The Premium license assignment would be temporary if so.

Once this list is confirmed, I will:

1. Clean up the role-based email accounts (accounting@, frontdesk@, hr@, etc.) → shared mailboxes (saves ~$137/mo).
2. Purchase the Business Premium licenses based on the confirmed count.
3. Create the ~38 net-new caregiver accounts in AD and M365.
4. Build the Conditional Access policies that enforce the "outside access" column — in-building users get locked to the building, outside-access users get the flexible "from managed device only" policy.
5. Connect ALIS to Microsoft for the users who use it — that's the piece that removes the second MFA prompt.

Thank you — please mark this up at your convenience.

Howard

---

Draft — prepared 2026-04-18 for Howard's review before sending.