Primary search intentit onboarding checklist

Why this matters

Onboarding is an access-control process, not just a laptop setup. Missing approvals can create too much access, while late requests create productivity problems and risky workarounds.

Before you begin

  • A confirmed employee name, start date, job title, department, and manager.
  • Approved access requirements from the manager or system owner.
  • A decision on device assignment and remote-work needs.
  • Enough lead time for licensing, shipping, and application provisioning.

Step-by-step instructions

Step 1: Confirm the request and approver

Verify the hire and identify the manager or authorized approver.

Why this step matters

IT should not create access based only on an informal message from an unknown requester.

What to look for

The request should have a documented owner and start date.

Step 2: Define access by role

List required email, files, applications, groups, shared mailboxes, calendars, and administrative rights.

Why this step matters

Role-based provisioning prevents copying another employee's excessive access.

What to look for

Each requested permission should have a business reason.

Step 3: Create the identity

Create the work account using the organization's naming standard and set the correct recovery and sign-in requirements.

Why this step matters

The identity becomes the anchor for licensing and access.

What to look for

The account should be company-owned and ready for secure first sign-in.

Step 4: Assign licenses and services

Apply only the licenses required for the employee's role.

Why this step matters

Over-licensing wastes money; under-licensing delays work.

What to look for

The user should have access to the expected services.

Step 5: Prepare the device

Assign, update, encrypt, enroll, and inventory the business computer before handoff.

Why this step matters

A new hire should not become the person who finishes securing a corporate device.

What to look for

The device should be patched, managed, and tied to the inventory.

Step 6: Require MFA and first-sign-in setup

Have the employee register approved MFA methods and change any temporary credentials securely.

Why this step matters

First sign-in is a high-risk handoff point.

What to look for

MFA should be working before access to sensitive systems.

Step 7: Validate access

Test required systems with the employee or manager and remove anything that was added only for testing.

Why this step matters

Validation catches missing access before it becomes an urgent ticket.

What to look for

The employee should be able to perform core job tasks without broad unnecessary access.

Step 8: Close the onboarding record

Record device assignment, account creation, license, access approvals, and any deferred work.

Why this step matters

A completed record becomes the baseline for future access reviews and offboarding.

What to look for

The final checklist should show who approved and what was actually provisioned.

What to look for when you are finished

A successful result should match the business purpose described above, use the smallest necessary access or configuration scope, and leave enough documentation that another authorized administrator can understand what was changed and why.

When to stop and contact IT

Stop conditionStop if the requester asks IT to copy all access from another employee without review, bypass MFA, share credentials, or create access before the hire is confirmed.

Secondary search questions this article answers

  • new employee IT checklist
  • employee technology onboarding
  • IT onboarding process
  • new hire account setup checklist

Authoritative references

Vendor interfaces and licensing can change. Verify current platform behavior against the primary documentation below before making high-impact production changes.

Need help applying this safely?

J3 Systems Group helps small businesses and nonprofits organize, secure, document, and improve Microsoft 365, Google Workspace, devices, access, and business technology operations.

Contact J3 Systems Group
KB-06.013 · Primary query: it onboarding checklist · Last reviewed 2026-08-21