Skip to content
← Overview

On day one everything is there. On the last day everything is closed.

kloq manages onboarding, role changes and offboarding, and creates or locks access in Microsoft Entra, Active Directory and your SaaS tools along the way. Before every change you see exactly what will happen.

On joining

account, groups and licenses are ready when the new colleague arrives. IT does not get a list by email.

On a role change

the new role’s rights are added and the old ones go away. Nobody collects access rights over the years.

On leaving

all access is locked on the last day. The mailbox is handed over without anyone reading its contents.

How onboarding works

  1. Create the personName, start date, site and role, e.g. “Customer service”.
  2. Review the previewkloq shows every change per system: account in Entra, groups, license, folders.
  3. ApprovePaid licenses and admin rights need approval; admin rights need a second person.
  4. RunOn the start date it runs automatically. Errors appear in the log, and nothing runs twice.
Roles and building blocks with access per role
Roles and building blocks. A role bundles what someone needs. When the role changes, the access changes with it.
Connections to Microsoft Entra and kloq. time
Connections. Microsoft Entra, Active Directory, SCIM and Google. Each connection may only do what you allow.
Planning an exit with a list of all people
Offboarding. Pick a date, check the preview, done. Access to kloq itself ends too; the payslip stays available.

Frequently asked questions

Does kloq need admin rights in our Microsoft account?

kloq uses only the rights you give the connection. What the connection may not do, kloq only suggests.

What happens to the mailbox after someone leaves?

It is locked first, then handed over without opening the contents. Access to contents exists only through a documented case with four eyes, limited to folders and a period.

Does it work without kloq. time?

Yes. Each product runs on its own. kloq. people does not need time tracking.