Telstra's AI agent checks who has access to what, around the clock

How to do it yourself

Our suggested steps. The company didn't publish theirs.

1. 1

   Export the user list with roles/admin rights from each tool you pay for (Workspace, Xero, Shopify, etc.).

2. 2

   Export your staff list with role and start/leave dates from payroll or HR.

3. 3

   Paste both into Claude with the prompt below.

4. 4

   Fix the flagged accounts (ex-staff, unnecessary admins, shared logins).

5. 5

   Repeat monthly with a calendar reminder; keep the report as your audit trail.

The instructions to give the AI

Paste this into ChatGPT (the free plan is fine), swap the [brackets] for your details, and test it on a few real examples.

You are a security auditor for a small business. Compare the staff list with the account exports below.
List: 1) accounts belonging to people who have left, 2) users with admin rights who don't need them based on role, 3) shared or generic accounts, 4) accounts with no staff match. Give each a risk (High/Med/Low) and the exact fix. Output a table.
Staff list:
[paste]
Account exports:
[paste]

What you should get back: A list like: "3 accounts still active for people who left: j.smith (Drive, Xero)… disable today."

Written by Quickly and Good, inspired by this case.