AI Agents
A library of pre-built agents for every employee service, from onboarding and access control to hardware, software, and informational requests. Ready to run on day one, powered by your organizational context and a knowledge base that updates itself in real time.
Account Lockouts & MFA Reset
Password resets remain high despite self-service due to complex MFA chains.
Application Access Request
Application access requests with approval and provisioning
Asset Activity Detection
Identifies managed assets that haven't reported activity within a configurable period, surfacing lost, stolen, or no-longer-used devices.
Asset Ownership Confirmation
Asks employees to confirm the devices assigned to them, chases the ones who do not reply, and reports every acknowledgement, rejection, and silence back to IT.
Asset Purchase Agent
Automated employee asset purchase program with eligibility checks, depreciation-based pricing, legal consent, and sequential approvals.
Certificate Expiration Detection
Monitor SSL/TLS and internal certificates across applications, servers, and devices
Device Recovery
Device recovery with identity verification and recovery key delivery
Device Uptime Detection
Monitors devices with high uptime
Discovered Applications Review
Collects every application Harmony has discovered, with its instances and users, into a single ticket so the desk can approve, reject, or investigate each one.
Domain Access Security Approval
Multi-stakeholder approval workflow for sensitive domain access with security and endpoint validation.
EDR Misconfiguration Detection
Monitor and validate EDR misconfigurations across different environments
EDR Policy Compliance Discovery
Continuous EDR policy compliance monitoring with automated remediation for non-compliant devices.
EDR Status Discovery
Maintains endpoint protection coverage.
Employee Account Termination
Provides a controlled, approval-driven path to deactivate user accounts and terminate active sessions immediately upon approval
Employee Offboarding
Perform account termination by identity provider deactivation and various termination process
Employee Onboarding
End-to-end onboarding process with account provisioning, ordering HW equipment, and tailored app access
Employee Referral
Captures employee referrals and creates them directly as applications in the ATS, removing manual handoffs between employees and recruiting.
Employees with No Assigned Assets
Flags active employees with no assigned equipment to catch missing records, undelivered hardware, or gaps in the onboarding process.
GitHub Access Management
Governs how users are added to, removed from, or have their permissions changed across GitHub repositories and teams, with approval workflows and automatic permission provisioning.
Group Membership Management
Manage group membership with approval - add or remove users from group
IDP Group Assignment
Automatically assigns users to identity provider groups.
IdP MFA Reset
Securely restores access for users who have lost or replaced their authentication device, with identity verification and guided re-enrollment built in
Inactive Employees
Detects inactive employee accounts and drives remediation through automated suspension and manager notification
Knowledge Article Recommendation
Suggest relevant knowledge base articles to agents and users during ticket creation.
Knowledge Base Auto-Generation
Automatically identifies knowledge gaps from resolved tickets and generates draft KB articles for review.
License Expiration Discovery
Monitors for applications licenses expiring soon
Low Storage Device Detection
Monitors devices with critically low storage capacity
Manual Ticket Approval
Adds a real approval step to any ticket on demand, with tiers, strategies, reminders, and a timeout, and writes the decision back to the ticket.
Offboarding Ownership Transfer Report
Maps everything a departing employee owns - applications, tickets, pending approvals, desks, and agents - into one ticket before their last day.
Password Reset Request
Password reset request with identity verification and temporary password delivery
Printers Health Detection
Monitors connectivity issues, low toner levels, and maintenance needs, triggering alerts to minimize downtime.
Slack & Teams Operations
Manage Slack and Teams channels and membership, create, archive, and add members, with automated approval routing.
Software Compliance Report
Runs periodic access reviews by having managers attest to each direct report's application access, then consolidates the results into an audit-ready record to support compliance requirements.
Time-Off Request
Provides a single, structured flow for submitting, approving, and tracking paid time off - improving visibility for employees, managers, and HR.
Unassigned Assets
Identifies active devices with no assigned owner, closing accountability gaps and keeping the asset register reliable.
Unauthorized Applications Detection
Highlights applications with low or no usage so IT can reclaim licenses, reduce SaaS spend, and shrink the application attack surface
Unencrypted Assets
Automated detection of devices without full-disk encryption with compliance enforcement workflows.
Unlock User Account
Restores access for locked-out users across all integrated identity providers through a single verified, automated flow
Unused Application Discovery
Surfaces applications with low or no usage so IT can reclaim licenses and reduce SaaS spend.