Asset Provisioning Gap Detection Agents

Keeping your asset inventory accurate is time-consuming when done manually. Two new autonomous agents continuously monitor your environment for provisioning gaps and surface them automatically, so your IT team can act without running periodic audits by hand.

• Employees with No Assigned Assets - finds active employees in your identity provider (IdP) who have zero company-owned assets assigned to them.
• Assets with No Assigned Employees - finds active company-owned assets that have no employee linked.

When either agent detects a gap, it creates a ticket with a CSV report attached and notifies your desk admins through Slack or Microsoft Teams.

How the Agents Work

Both agents run on a configurable schedule. At each scheduled interval, an agent queries your connected IdP and asset inventory, compares the two data sets, and identifies records that do not have a corresponding match on the other side.

If gaps are found, the agent automatically:

1. Creates a ticket in your helpdesk, with a CSV file attached that lists every affected employee or asset.
2. Sends a notification to your configured Slack channel or Microsoft Teams channel so desk admins are alerted in real time.

If no gaps are found during a run, no ticket or notification is created.

Employees with No Assigned Assets

This agent focuses on the employee side of the gap. It scans your IdP for accounts that are marked as active and then checks whether any company-owned asset is assigned to each employee. Any active employee with zero assigned assets is included in the report.

Common follow-up actions for your IT team:

• Assign an existing unallocated asset to the employee.
• Initiate a procurement or provisioning request if no suitable asset is available.
• Verify whether the employee is a contractor or role that genuinely requires no hardware.

Assets with No Assigned Employees

This agent focuses on the asset side of the gap. It scans your active company-owned asset inventory and checks whether each asset is linked to at least one employee. Assets with no employee linked are included in the report.

Common follow-up actions for your IT team:

• Assign the asset to the correct employee if it was overlooked during onboarding.
• Retire or mark the asset as a spare if it is no longer in use.
• Investigate whether the asset was recently offboarded but not properly returned or decommissioned.

Configuring the Agents

You can configure each agent independently from the Agents section of your Harmony settings.

For each agent, you can set:

Setting	Description
Schedule	How often the agent runs (for example, daily, weekly, or a custom cron interval).
Notification channel	The Slack channel or Microsoft Teams channel where desk admins receive alerts.
Ticket assignment	The queue or group that newly created tickets are routed to.

Both agents can be enabled or disabled individually, so you can run only the checks that are relevant to your current workflow.

Understanding the CSV Report

Each ticket created by these agents includes a CSV file attachment. The CSV contains one row per detected gap and includes identifying details such as employee name, employee ID, asset name, and asset serial number, depending on the agent that generated it.

You can download the CSV directly from the ticket to review the full list, filter by specific fields, or import it into another tool for bulk processing.

Prerequisites

Before enabling these agents, make sure the following are in place:

• An IdP (such as Okta, Azure AD, or Google Workspace) is connected and syncing active employee records.
• Your asset inventory is populated in Harmony with ownership and assignment data.
• At least one Slack or Microsoft Teams integration is configured for notifications.