New User Setup
Onboard a new employee — M365 account, license, groups, SharePoint, and orientation workflow.
Exit User / Offboarding
Offboard departing staff — revoke access, shared mailbox, email forwarding, and device reset.
SharePoint & DL Permissions
Manage SharePoint sites, distribution lists, Teams channels, and shared mailboxes.
OOO / Email Forwarding
Set auto-reply messages and email forwarding for leave or absences.
How it works
New User Setup
Use our mutually agreed checklist to onboard a new employee. Covered are security, email groups, licensing, Zoom, and hardware.
Exit User / Offboarding
Submit a departure request. Access will be revoked, mailbox converted to shared, and a forwarding schedule applied.
Permissions & Group Access
Request access changes to SharePoint sites, distribution lists, M365 groups and shared mailboxes. KairosIT will process within 4 business hours.
OOO / Email Forwarding
Configure auto-reply messages and email forwarding for leave or absences.
Software Request
Request software installation or licensing — our team will verify compatibility and action your request.
Device Wipe / Reload
Autopilot-reset or rename Intune-managed devices to repurpose after an exit or prepare for a new user.
Select Device
Action for: —
Confirm Action Details
Dynamic Group Builder
Create Azure AD dynamic security groups. Groups update membership automatically based on user attributes.
Group Details
Membership Rule
Linked / Nested Groups (optional)
Feature Requests
Suggest improvements to the KairosIT Client Portal. All requests are reviewed by our development team.
Knowledge Base
Workflow guides and SOPs for using the KairosIT Client Portal.
New User Setup
This portal creates a helpdesk ticket for KairosIT to onboard the new employee. Submit at least 72 business hours before the start date.
What KairosIT actions:
CIPP account creation · License assignment · Dynamic group membership · Manual group additions · SharePoint permissions · Zoom phone setup · MFA enforcement · bizhub address book · ITGlue contact card · TimeZest orientation scheduling · Encrypted welcome packet to manager
Exit User / Offboarding
Submit at least 5 business days before last day. KairosIT always actions: license removal, group removal, mailbox conversion to shared.
Optional actions you configure:
Email forwarding duration · OneDrive data transfer · Device autopilot reset · Out of office message
Dynamic Group Builder
Requires Azure AD Premium P1+. Build the membership rule using the visual builder — the portal generates the Azure AD membership rule syntax automatically. Groups update membership in near real-time as user attributes change.
Permissions & Groups
Use the format SP-[Site]-[Library] for SharePoint sites. For distribution lists and M365 groups, just enter the display name. KairosIT will process within 4 business hours.
Admin Settings
Environment variables, Azure permissions, and deployment checklist for the KairosIT Client Portal.
Required Environment Variables (Vercel)
| Variable | Description |
|---|---|
| ${k} | ${v} |
Azure App Registration
https://kit-customer-portal.vercel.app/api/auth?action=callbackDelegated permissions (admin consented): openid, profile, email, User.Read, offline_access, Directory.Read.All, Directory.ReadWrite.All, User.Read.All, User.ReadWrite.All, Group.ReadWrite.All, Sites.Read.All, DeviceManagementManagedDevices.Read.All, MailboxSettings.ReadWrite
Application permissions (admin consented) — required for automated offboarding:
User.ReadWrite.AllPassword reset + account disable
Group.ReadWrite.AllRemove user from all groups — must be APPLICATION not just Delegated
MailboxSettings.ReadWriteOOO auto-reply + mail rules + shared mailbox conversion
UserAuthenticationMethod.ReadWrite.AllRemove MFA methods (Authenticator, phone, FIDO2, etc.)
Exchange.ManageAsAppShared mailbox conversion fallback — add via Office 365 Exchange Online API
Also assign the Exchange Administrator role to the app's service principal: Azure AD → Roles and administrators → Exchange Administrator → Add assignments → search your app name.
Supabase Setup
CREATE TABLE IF NOT EXISTS portal_sessions ( id TEXT PRIMARY KEY, access_token TEXT NOT NULL, user_email TEXT NOT NULL, user_name TEXT, tenant_id TEXT, org_name TEXT, org_domain TEXT, email_format TEXT DEFAULT 'firstname.lastname', expires_at TIMESTAMPTZ NOT NULL, created_at TIMESTAMPTZ DEFAULT NOW() );
SMTP Settings
Configure and test email delivery for ticket notifications and welcome packets.
Connection Status
SMTP2Go Setup
1. Log in at app.smtp2go.com → Sending → SMTP Users → Add SMTP User
2. Set SMTP_HOST=mail.smtp2go.com, SMTP_PORT=587
3. Set SMTP_USER to the sender username (not your account email)
4. Set SMTP_PASS to the sender password
5. Redeploy on Vercel after setting env vars
Scheduled Actions
Pending automated tasks — email forward removals and OOO removals.