← Andrew Yasrebi

Self-service provisioning bot

Non-technical staff at remote offices create fully configured accounts in under a minute — without anyone gaining admin access.

Context

Remote offices needed new hires working on day one, but every account request routed through central IT, creating a bottleneck across time zones.

The problem

Provisioning required admin access to multiple platforms. Handing that access to office managers wasn't acceptable; keeping it centralized meant new hires sat idle waiting on a queue.

What I built

A conversational bot that walks a requester through a short structured intake — who's being onboarded, which team they're joining — validates the answers, then calls the platform APIs directly to create accounts with the correct role-based permissions applied. Admin credentials stay in the service and are never exposed to the requester.

A request from an office manager passes through the bot to a provisioning service, which holds the admin credentials and calls the directory and CRM APIs. The credentials never travel back toward the requester. Office manager structured intake Bot — validates Provisioning service Admin credentials never leave the service Directory CRM
The requester never holds credentials — they reach the platform APIs only from inside the service.

Result

Provisioning moved from a ticket queue to under a minute, self-served, with no expansion of admin access.

Stack

Telegram Bot API · Google Workspace Admin SDK · CRM REST API