{
  "name": "Offboard a leaver",
  "description": "Revoke access across every connected tool in order, transfer ownership, and log each action with a flag for anything that fails.",
  "generatedBy": "Spion",
  "generatedAt": "2026-06-14T14:13:03.648Z",
  "confidence": "strong",
  "efficiencyGain": {
    "manualSteps": 18,
    "automatedSteps": 5,
    "reductionPercent": 72,
    "timeSavedPerRun": "~25 min",
    "annualHoursSaved": null
  },
  "trigger": {
    "provider": "workato",
    "type": "event",
    "name": "Departure record",
    "description": "When HR marks an employee as departing"
  },
  "actions": [
    {
      "number": 1,
      "type": "action",
      "tool": "Google Workspace",
      "name": "Suspend account",
      "description": "Suspend the account, reset the password, end active sessions.",
      "replaces": [],
      "addedBySpion": false
    },
    {
      "number": 2,
      "type": "action",
      "tool": "SaaS connectors",
      "name": "Deactivate seats",
      "description": "Deactivate Slack, Jira, and every connected seat in order.",
      "replaces": [],
      "addedBySpion": false
    },
    {
      "number": 3,
      "type": "action",
      "tool": "Google Drive",
      "name": "Transfer ownership",
      "description": "Transfer document ownership to the named manager.",
      "replaces": [],
      "addedBySpion": false
    },
    {
      "number": 4,
      "type": "action",
      "tool": "Identity provider",
      "name": "Remove access",
      "description": "Remove SSO and all group memberships.",
      "replaces": [],
      "addedBySpion": false
    },
    {
      "number": 5,
      "type": "action",
      "tool": "Checklist",
      "name": "Confirm revocations",
      "description": "Confirm each revocation; flag any that did not confirm for security.",
      "why": "an unrevoked seat is a security finding, not a footnote.",
      "replaces": [],
      "addedBySpion": true
    }
  ]
}