Ctrlk
Go to WebsiteLoginGet a Demo
For the complete documentation index, see llms.txt. This page is also available as Markdown.

User Lifecycle

What joining, changing roles and leaving mean across Human Access and Agent Access, from the first onboarding task to the last agent session.

Cakewalk follows your company's HRIS through every stage of employment. Each lifecycle event lands in both modules of the platform: Human Access moves the person's app access, and Agent Access evaluates their Agents against the change.

📖 Key Concepts

  • Joiner: a new hire synced from the HRIS triggers onboarding and receives the Apps their groups grant by default.

  • Mover: a role, team or location change updates the attributes both modules read.

  • Leaver: offboarding removes app access, Agent Access and the Connections (the apps their Agents connected to) that came with it.

💡 Why this matters: Agents act with their person's access. A lifecycle event that changes what a person may do also changes what their Agents may do, without anyone reconfiguring an Agent.

🚪 Joining

  1. The new hire flows into Cakewalk on HRIS sync, with name, email, manager, department, title and location.

  2. Onboarding grants the Apps the person's groups carry by default, by hand or through Agent Cake, Cakewalk's AI provisioning agent.

  3. If their groups carry Agent Access by default, they hold it from day one and can connect their first Agent.

🔁 Moving

A role, team or location change updates the person's attributes, and both modules respond:

  • Human Access: group memberships shift, which can add or remove the Apps those groups grant and flag access that no longer fits the new role.

  • Agent Access: Policies (the rules that decide each agent action) evaluate department, title, team and location on every action, so the same HRIS change that moves someone's app access also changes what their Agents may do. The person changes departments; their Agents follow at their next action.

🚫 Leaving

Offboarding runs through Human Access and covers everything the person held:

  • App seats are removed, with tasks created for anything that needs a human step.

  • Their Agent Access is removed and the credentials behind their Connections are deleted. An Agent cannot reconnect or start a new session after that.

  • An Agent still mid-session can keep working on its existing sign-in for a short time, at most 8 hours from when that sign-in was issued.

Offboarded Users lose their Agent access automatically: nobody has to remember the Agents when closing out a departure.

📚 Related

PreviousSwitching Modules
NextHRIS and IdP

Last updated

Was this helpful?