How it works

One directory, one order flow, one record per change.

Entra Logic keeps a synced copy of your directory, turns changes into orders that carry their own reason and approval, and executes them against Microsoft Graph. Every screen below is the product.

The synced copy

Everything you manage, in one view

Users, groups, devices, licenses and the business applications that hang off them are read into one model. Multi-tenant from the ground up: one company or twenty-three, the picture is the same shape.

Module overview — the applications connected to the tenant.

Request and approval

The manager describes the person, not the permissions

A new hire order asks for role, company, start date and manager. The access package behind that role is defined once, by IT, and applied consistently. The approver sees the change, the cost and the reason before approving.

New employee order. Reason required, approver named.

Execution

Automation rules, not scripts pasted into a console

Rules run on triggers — an approved order, a leaving date, an attribute change — and perform the actions you defined, through Microsoft Graph and PowerShell. Nobody needs a standing admin role for a rule to run.

The automation rule editor: trigger, actions, and who owns the rule.

The audit trail

Request, reason, approval and result in one record

Order detail is the whole story of a change on a single page, with timestamps. Nobody has to correlate a ticket, a mailbox and a sign-in log to answer what happened and why.

From request to executed change on one record — no one has to reconstruct what happened, or why.

Cleanup

The findings you can act on directly

Duplicate devices, accounts still enabled after their leaving date, unused licenses with their monthly cost, and data quality issues that quietly block your automation rules. Each finding becomes an order, so the fix is logged like everything else.

Duplicate device review, with the records proposed for cleanup.

The employee app

An app for the employee, not a mobile view of an admin tool

Employees request access, approve on behalf of their team, and see their own equipment and licenses. Contact lists from the organization can sync to the phone when the employee opts in. It is included in the price.

Employees request access and managers approve from the phone — minutes instead of a ticket queue.

What it does not do.

There is no access certification campaign, no attestation workflow and no segregation-of-duties analysis. If those are what you are buying, we are not the answer, and it is cheaper for both of us to find that out on this page.