On day one everything is there. On the last day everything is closed.
kloq manages onboarding, role changes and offboarding, and creates or locks access in Microsoft Entra, Active Directory and your SaaS tools along the way. Before every change you see exactly what will happen.
account, groups and licenses are ready when the new colleague arrives. IT does not get a list by email.
the new role’s rights are added and the old ones go away. Nobody collects access rights over the years.
all access is locked on the last day. The mailbox is handed over without anyone reading its contents.
How onboarding works
- Create the personName, start date, site and role, e.g. “Customer service”.
- Review the previewkloq shows every change per system: account in Entra, groups, license, folders.
- ApprovePaid licenses and admin rights need approval; admin rights need a second person.
- RunOn the start date it runs automatically. Errors appear in the log, and nothing runs twice.



Frequently asked questions
Does kloq need admin rights in our Microsoft account?
kloq uses only the rights you give the connection. What the connection may not do, kloq only suggests.
What happens to the mailbox after someone leaves?
It is locked first, then handed over without opening the contents. Access to contents exists only through a documented case with four eyes, limited to folders and a period.
Does it work without kloq. time?
Yes. Each product runs on its own. kloq. people does not need time tracking.