Workflows and Example Prompts
Overview
After you connect your AI client, use this page to run BalkanID workflows in natural language. Each section lists example prompts you can try and the actions available through MCP.
Tool names and access requirements are in Tools Reference. You can also ask your assistant to call help for an in-session overview.
Identity and entitlement discovery
Get a live picture of identities, connections, resources, and how they connect across applications.
Example prompts
“Find terminated employees who still have active access across our apps.”
“Show active service accounts in Azure with no primary owner.”
“List identities in Okta with orphaned status.”
“Find all identities linked to jane.doe@company.com across every integration.”
Supported actions
List identities with filters (application, type, status, email, handle, and more)
List connections (roles/groups) and resources (repos, channels, projects, and similar)
Explore entity relationships (for example identity → connection, connection → resource)
Pull distinct filter values for investigation (departments, apps, and similar facets)
Credentials and non-human access
Discover credentials such as API keys, tokens, and service account keys from connected systems.
Example prompts
“Show expired credentials in Azure on production service accounts.”
“Which credentials are unused or look stale?”
“List credentials for a specific application and status.”
Supported actions
List credentials filtered by type, status, application, integration, or owner
Cross-reference credentials with identities and resources through entity relations
Integrations
See connected applications and refresh data when needed.
Example prompts
“Show all active integrations and their sync status.”
“Trigger a resync for the Azure integration.”
Supported actions
List integration instances (defaults to active integrations)
Trigger a sync for an integration (Write scope + Administrator role)
Employees (HRIS records)
Work with employee records used for ownership, requests, and reviews.
Example prompts
“Who reports to Jane Smith?”
“Onboard a contractor: jane.smith@company.com, Software Engineer, reports to manager@company.com.”
Supported actions
List employees with filters (department, title, manager, employment type, terminated)
Create or update employees by email (Write scope + Administrator role)
User access reviews (UAR)
Monitor campaigns and action review items.
Example prompts
“Show overdue access review campaigns and completion rates.”
“How many pending reviews do I have?”
“Approve these review IDs and record the reason for audit.”
Supported actions
List campaigns (Risk Manager and Administrator)
List campaign or request review items
Approve, reject, or delegate reviews (with optional reason)
Access requests and JITPBAC
Work with access requests and JITPBAC (Just-in-Time Purpose-Based Access Control) through Purposes and Constraints.
Example prompts
“Show pending access requests assigned to me.”
“Request temporary access to the BLR Manager purpose for dhshah@company.com, expiring in 7 days.”
“List active Purposes.”
“Show Constraints that deny finance users from production admin roles.”
Supported actions
List and inspect access requests
Approve, reject, or delegate at request level or by review IDs
List Purposes and Purpose details
Create Purpose requests; assign or unassign yourself when eligible
List, create, update, or delete Constraints (denial policies) — create/update/delete require Risk Manager or Administrator
For product background on these workflows, see:
Last updated
Was this helpful?