Each guide shows how to build one workflow action: what it does, the credential and approval it needs, a prompt to ask SuperIT to build it for you, and a script you can use instead. Use them as they are, or as a starting point for your own.
Before you build an action, ask whether you need one. SuperIT already investigates and fixes many problems in chat by running commands on a device, reads Microsoft 365, and updates tickets in your PSA. An action is worth building when it adds something those defaults can't: a credential for another system, a change in Microsoft 365, a command your command policies block in chat, a schedule, a safe self-service task for end users, one reviewed procedure for every customer, or a browser for a portal with no API. Each guide says why it needs an action, and when to just ask SuperIT instead.
Workflow actions are general purpose. Anything you can do with PowerShell, or in a web browser, can become an action: SuperIT can then run it for your engineers in chat, on a schedule, or as part of a ticket investigation, within the approval rules you set. If the task you need isn't listed, ask SuperIT to build it with you. See Create an action.
These are examples
SuperIT doesn't ship these actions ready-made. The example scripts haven't been tested end to end in a SuperIT tenant. Review each one with SuperIT before you publish it, and test it on a test account or device first: Test runs the script for real.
Users and identity
Onboarding, offboarding and changes to a user's access in Microsoft 365, Active Directory and other systems.
| Guide | Runs in | What it does |
|---|---|---|
| Onboard a Microsoft 365 user | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that creates a Microsoft 365 user with a temporary password, assigns a licence and adds groups, with admin approval. |
| Offboard a Microsoft 365 user | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that offboards a Microsoft 365 leaver: block sign-in, revoke sessions, reset password, remove groups and licences. |
| Reset a Microsoft 365 password | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that resets a Microsoft 365 user's password to a temporary one that must be changed at next sign-in. |
| Block or unblock sign-in | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that blocks or unblocks a Microsoft 365 user's sign-in, and optionally revokes their open sessions. |
| Assign or remove a licence | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that assigns or removes a Microsoft 365 licence for a user, checking free seats and usage location first. |
| Add or remove group members | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that adds a user to, or removes them from, a Microsoft 365 group, Teams team or security group. |
| Copy group memberships from another user | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that copies a colleague's Microsoft 365 and security group memberships to another user, and reports what it skipped. |
| Unlock an on-premises AD account | On the device (PowerShell, as SYSTEM), on a domain controller or a server with RSAT | Build a device action that unlocks an on-premises Active Directory account and can set a temporary password, run on a domain controller with admin approval. |
| Look up a new starter in your HR system | Cloud sandbox (PowerShell) | Build a read-only action that pulls a new starter's role, manager and start date from your HR system's API, so SuperIT can prepare onboarding without retyping. |
Mailbox settings, forwarding and shared mailboxes.
| Guide | Runs in | What it does |
|---|---|---|
| Set an out-of-office reply | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that sets, schedules or turns off an Exchange Online out-of-office reply for a user's mailbox. |
| Set up mail forwarding | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that starts or stops Exchange Online mailbox forwarding for a user, with admin approval for every change. |
| Grant shared mailbox access | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that grants or removes Full Access and Send As permissions on an Exchange Online shared mailbox. |
| Check domain and DNS records | Cloud sandbox (PowerShell) | Build a cloud action that checks a list of domains' registration expiry, MX, SPF and DMARC records on a schedule, and posts problems to your channel. |
Security
Respond to compromised accounts and keep device protection current.
| Guide | Runs in | What it does |
|---|---|---|
| Revoke sessions for a compromised account | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that locks down a compromised Microsoft 365 account: block sign-in, replace the password, then revoke all sessions. |
| Reset MFA or issue a Temporary Access Pass | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that issues a Microsoft Entra Temporary Access Pass or removes a user's MFA methods so they must register again. |
| Remove a suspicious inbox rule | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that disables or removes a suspicious Exchange Online inbox rule, such as one forwarding mail outside the company. |
| Update Defender and scan | On the device (PowerShell, as SYSTEM) | Build a device action that updates Microsoft Defender signatures and starts a quick scan, which chat command policies deny by default. |
Devices
Fixes and maintenance that run on a Windows device through the SuperIT RMM agent, where the default chat commands are blocked or a reviewed, repeatable procedure is better.
| Guide | Runs in | What it does |
|---|---|---|
| Free up disk space | On the device (PowerShell, as SYSTEM) | Build a device action that reports reclaimable space, then clears temp files, the Windows Update cache and optionally recycle bins. |
| Restart a Windows service | On the device (PowerShell, as SYSTEM) | Build a device action that restarts one named Windows service, waits for it to run, restarts its dependants, and refuses services that would break the device. |
| Clear a stuck print queue | On the device (PowerShell, as SYSTEM) | Build a device action that stops the Print Spooler on a workstation, deletes stuck jobs, restarts it and reports what was cleared. |
| Install software with winget | On the device (PowerShell, as SYSTEM) | Build a software catalogue: a device action that installs one of your approved winget packages machine-wide, run by engineers or approved for end users. |
| Check and install Windows updates | On the device (PowerShell, as SYSTEM) | Build a device action that installs Windows updates on one named server on a schedule, in a background task, and reports progress when asked. |
| Schedule a reboot with a warning | On the device (PowerShell, as SYSTEM) | Build a device action for recurring restarts, such as a weekly terminal server restart, with an on-screen warning for signed-in users. Unsaved work is lost. |
| Query an on-premises system | On the device (PowerShell, as SYSTEM) | The cloud sandbox can't reach private networks. Run a PowerShell action on a server with the SuperIT RMM agent to query on-premises systems instead. |
Integrations and APIs
Custom tools that let SuperIT fetch information from, or update, other systems through their APIs.
| Guide | Runs in | What it does |
|---|---|---|
| Call a third-party API | Cloud sandbox (PowerShell) | Store an API key as a credential, write a short PowerShell action that fetches data, and let SuperIT run it in chat and summarise the result. |
| Look up a device in your docs platform | Cloud sandbox (PowerShell) | Build a read-only action that searches your documentation platform's API for a device and returns its documented details to SuperIT in chat. |
| Check backup job status | Cloud sandbox (PowerShell) | Build a read-only action that pulls recent backup jobs from your backup platform's API so SuperIT can report failed and missed backups in chat or on a schedule. |
| Look up device warranty | Cloud sandbox (PowerShell) | Build a read-only action that checks a device's warranty with the manufacturer's API by serial number, including APIs that need a client-credentials token. |
| Add time or notes to a PSA ticket | Cloud sandbox (PowerShell) | Build an action that logs a time entry on an Autotask or Halo ticket through the PSA's REST API. ConnectWise time entries are built into SuperIT chat. |
| Post to a Teams or Slack channel | Cloud sandbox (PowerShell) | Build an action that posts a message to a Microsoft Teams or Slack channel through an incoming webhook, with the webhook URL stored as an encrypted credential. |
Browser automation
Use Playwright to work with vendor and cloud portals that have no API.
| Guide | Runs in | What it does |
|---|---|---|
| Download a report from a vendor portal | Cloud sandbox (Playwright) | Build a Playwright browser action that signs in to a vendor portal with no API, downloads a CSV report and returns a short summary SuperIT can use in chat. |
| Fill in a web form on a vendor portal | Cloud sandbox (Playwright) | Build a Playwright action that signs in to a vendor portal and submits a form, such as a hardware RMA request, after approval, and returns the case number. |
| Check users and licences in a vendor portal | Cloud sandbox (Playwright) | Build a Playwright action that signs in to a vendor's admin portal, reads its user list and licence counts, and flags suspended users who still hold a seat. |
| Check a network device in its cloud portal | Cloud sandbox (Playwright) | Build a Playwright action that signs in to a vendor's cloud management portal and reports a site's devices: online or offline, firmware version and open alerts. |
Reporting and monitoring
Scheduled checks and summaries that post or email their own results.
| Guide | Runs in | What it does |
|---|---|---|
| Find inactive accounts | Cloud sandbox (PowerShell) | Build a SuperIT workflow action that lists enabled Microsoft 365 accounts with no sign-in for N days, using Entra sign-in activity. Needs Entra ID P1. |
| Check website and SSL certificate expiry | Cloud sandbox (PowerShell) | Build a cloud action that checks a list of HTTPS sites' certificates on a weekly schedule and posts to your channel when one is invalid or near expiry. |
| Send a weekly summary report | Cloud sandbox (PowerShell) | Build a PowerShell action that reads Microsoft 365 licence use through Microsoft Graph and emails a weekly summary, scheduled every 7 days in SuperIT chat. |