[GH-ISSUE #3821] [Feature Request]: Onboarding (reverse offboarding) of a user

kerem commented

2026-03-02 13:46:22 +03:00

Owner

Originally created by @kennypollock on GitHub (Mar 19, 2025).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/3821

Please confirm:

I have searched existing feature requests (open and closed) and found no duplicates.
**me or my organization is currently an active sponsor of the product at the $99,- level.

Problem Statement

CIPP offers a powerful offboarding wizard that streamlines user termination, but there is no equivalent tool for reinstating a previously offboarded user.

As an MSP, I appreciate being able to offboard a user with just a few clicks from my phone. However, when a user is rehired, I have to manually log into the admin center and reverse multiple actions, such as re-enabling licenses, restoring group memberships, and reassigning permissions. This process is time-consuming and could be greatly simplified with an automated onboarding feature.

Benefits for MSPs

✅ Reduce manual work – Automate the reactivation process, saving time and effort.
✅ Improve consistency – Ensure that users regain the exact access and settings they previously had.
✅ Enhance scalability – Enable MSPs to quickly onboard users without navigating multiple portals.
✅ Increase efficiency – Reduce errors caused by manually recreating accounts, group assignments, and permissions.

Value or Importance

This feature is essential for MSPs that frequently manage staff turnover. Many businesses experience seasonal hiring cycles or temporary layoffs, requiring employees to be reactivated with the same permissions and access. Automating this process would:

Save time by eliminating repetitive administrative tasks.
Enhance security by ensuring proper re-provisioning of access.
Standardize workflows by aligning onboarding with offboarding best practices.
This feature isn’t just a convenience—it directly impacts operational efficiency, allowing MSPs to focus on higher-value tasks rather than administrative overhead.

PowerShell Commands (Optional)

No response

Originally created by @kennypollock on GitHub (Mar 19, 2025). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/3821 ### Please confirm: - [x] **I have searched existing feature requests** (open and closed) and found no duplicates. - [x] **me or my organization is currently an active sponsor of the product at the $99,- level. ### Problem Statement CIPP offers a powerful offboarding wizard that streamlines user termination, but there is no equivalent tool for reinstating a previously offboarded user. As an MSP, I appreciate being able to offboard a user with just a few clicks from my phone. However, when a user is rehired, I have to manually log into the admin center and reverse multiple actions, such as re-enabling licenses, restoring group memberships, and reassigning permissions. This process is time-consuming and could be greatly simplified with an automated onboarding feature. ### Benefits for MSPs ✅ Reduce manual work – Automate the reactivation process, saving time and effort. ✅ Improve consistency – Ensure that users regain the exact access and settings they previously had. ✅ Enhance scalability – Enable MSPs to quickly onboard users without navigating multiple portals. ✅ Increase efficiency – Reduce errors caused by manually recreating accounts, group assignments, and permissions. ### Value or Importance This feature is essential for MSPs that frequently manage staff turnover. Many businesses experience seasonal hiring cycles or temporary layoffs, requiring employees to be reactivated with the same permissions and access. Automating this process would: Save time by eliminating repetitive administrative tasks. Enhance security by ensuring proper re-provisioning of access. Standardize workflows by aligning onboarding with offboarding best practices. This feature isn’t just a convenience—it directly impacts operational efficiency, allowing MSPs to focus on higher-value tasks rather than administrative overhead. ### PowerShell Commands (Optional) _No response_

kerem

2026-03-02 13:46:22 +03:00

closed this issue
added the
enhancement

no-priority
labels

kerem commented

2026-03-02 13:46:23 +03:00

Author

Owner

@KelvinTegelaar commented on GitHub (Mar 20, 2025):

This is not something CIPP can help with - Reversing onboarding would require us to create a db of offboarded users and data which would go against privacy regulations, and the way cipp works.

@KelvinTegelaar commented on GitHub (Mar 20, 2025): This is not something CIPP can help with - Reversing onboarding would require us to create a db of offboarded users and data which would go against privacy regulations, and the way cipp works.

kerem commented

2026-03-02 13:46:23 +03:00

Author

Owner

@kennypollock commented on GitHub (Mar 20, 2025):

No, I don’t think you understand at all… select a user… and “undo” whatever the normal onboarding tasks are
Show in gal
Reset password
Unblock user
Add license
Convert to regular mailbox from shared

Tell me why that cant be easily coded????

never said anything about storing user data????? not sure where you came up with that from?

@kennypollock commented on GitHub (Mar 20, 2025): No, I don’t think you understand at all… select a user… and “undo” whatever the normal onboarding tasks are Show in gal Reset password Unblock user Add license Convert to regular mailbox from shared Tell me why that cant be easily coded???? never said anything about storing user data????? not sure where you came up with that from?

kerem commented

2026-03-02 13:46:23 +03:00

Author

Owner

@kris6673 commented on GitHub (Mar 20, 2025):

@kennypollock This is all something that is close to each other in the current "View User" panes.

Show in gal
- Found in the tab "Exchange settings" under actions in the top right
Reset password
- Found in the tab "View User" under actions in the top right
Unblock user
- Found in the tab "View User" under Settings -> Licenses
Add license
- Found in the tab "Edit User" under actions in the top right
Convert to regular mailbox from shared
- Found in the both the "Exchange settings" and "View User" tabs, under actions in the top right

@kris6673 commented on GitHub (Mar 20, 2025): @kennypollock This is all something that is close to each other in the current "View User" panes. - Show in gal - Found in the tab "Exchange settings" under actions in the top right - Reset password - Found in the tab "View User" under actions in the top right - Unblock user - Found in the tab "View User" under Settings -> Licenses - Add license - Found in the tab "Edit User" under actions in the top right - Convert to regular mailbox from shared - Found in the both the "Exchange settings" and "View User" tabs, under actions in the top right

kerem commented

2026-03-02 13:46:23 +03:00

Author

Owner

@kennypollock commented on GitHub (Mar 20, 2025):

@kris6673 correct, and having to jump around to all different sections to achieve a simple goal of "reactivating a user who was previously offboarded" seems crazy. you can also offboard a user by going to all of those sections too... but they came up with an offboarding feature to make it handy. it doesn't seem like you guys have any interest in taking my feature suggestion for some reason, i'll take the hint then and stop making any.

@kennypollock commented on GitHub (Mar 20, 2025): @kris6673 correct, and having to jump around to all different sections to achieve a simple goal of "reactivating a user who was previously offboarded" seems crazy. you can also offboard a user by going to all of those sections too... but they came up with an offboarding feature to make it handy. it doesn't seem like you guys have any interest in taking my feature suggestion for some reason, i'll take the hint then and stop making any.

kerem commented

2026-03-02 13:46:23 +03:00

Author

Owner

@kris6673 commented on GitHub (Mar 20, 2025):

Sorry if I offended you, Kenny.
The interface has changed a lot in a short time, and I didn't know if you knew that the options were fairly close now. In the previous v6 interface, all the actions were miles apart, and took ages to get to.
From what I also understood from your FR, and your multiple references to automating onboarding, you wanted a button to reactivate users again and let them automatically get their previous permissions back. That would require storing all the offboarded users and what was done in the offboarding, somewhere. Keeping that data could turn into a privacy nightmare.
You are of course very welcome to make FR's, many of the best things about CIPP came from them! :)

@kris6673 commented on GitHub (Mar 20, 2025): Sorry if I offended you, Kenny. The interface has changed a lot in a short time, and I didn't know if you knew that the options were fairly close now. In the previous v6 interface, all the actions were miles apart, and took ages to get to. From what I also understood from your FR, and your multiple references to automating onboarding, you wanted a button to reactivate users again and let them automatically get their previous permissions back. That would require storing all the offboarded users and what was done in the offboarding, somewhere. Keeping that data could turn into a privacy nightmare. You are of course very welcome to make FR's, many of the best things about CIPP came from them! :)

kerem commented

2026-03-02 13:46:23 +03:00

Author

Owner

@kennypollock commented on GitHub (Mar 20, 2025):

@kris6673 I am offended that Kevin closed the feature request with an unrelated response.
Automated onboarding, as in, automatically enable those options I mentioned above. Nothing about groups, or storing user info, or storing anything at all. If you can have a shortcut to offboard a user, instead of having to manually do all of those offboarding procedures, one would think the same feature in reverse (just for the basics to get a user back into their account) should be common sense to me.

One button that does this, easy peasy:
Show in gal
Reset password
Unblock user
Add license
Convert to regular mailbox from shared

@kennypollock commented on GitHub (Mar 20, 2025): @kris6673 I am offended that Kevin closed the feature request with an unrelated response. Automated onboarding, as in, automatically enable those options I mentioned above. Nothing about groups, or storing user info, or storing anything at all. If you can have a shortcut to offboard a user, instead of having to manually do all of those offboarding procedures, one would think the same feature in reverse (just for the basics to get a user back into their account) should be common sense to me. One button that does this, easy peasy: Show in gal Reset password Unblock user Add license Convert to regular mailbox from shared

kerem referenced this issue

2026-03-02 13:58:03 +03:00

[PR #1703] [CLOSED] Run from Package docs #3372

Rows
Columns

[GH-ISSUE #3821] [Feature Request]: Onboarding (reverse offboarding) of a user #1703

Please confirm:

Problem Statement

Benefits for MSPs

Value or Importance

PowerShell Commands (Optional)