> ## Documentation Index
> Fetch the complete documentation index at: https://docs.porcia.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Playbooks

> Guided multi-step workflows for offboarding, access reviews, and recurring governance processes — under Workflows → Playbooks.

**Playbooks** is under **Workflows → Playbooks** in the sidebar at `/workflows/playbooks`. It shows a grid of available playbooks and a banner for any currently running playbook executions.

## The Playbooks page

When you navigate to **Workflows → Playbooks**, you see:

**Active Run Banner** — shown at the top when one or more playbook runs are currently in progress. Shows the playbook name, who started it, and how far along it is. Click to open the run detail.

**Playbook grid** — all available playbooks displayed as cards. Each card shows the playbook name, description, step count, last run date, and a Run button.

If no playbooks have been configured yet, the page shows an empty state with instructions for your admin to set them up.

## What playbooks solve

Recurring IT and security processes — onboarding, offboarding, access reviews, vendor offboarding — rely on tribal knowledge without playbooks. Steps get skipped under time pressure. Playbooks make the process explicit, trackable, and auditable: every step assigned, every completion timestamped.

## How playbooks work

A playbook is a named sequence of steps. Each step has a type, a description, and an assigned person or role. When a playbook is run, it creates a **run instance** that tracks step completion, actor, and timestamp.

### Step types

| Step type              | What it does                                      |
| ---------------------- | ------------------------------------------------- |
| **Send pulse**         | Trigger an async outreach to an employee          |
| **Revoke OAuth grant** | Remove a specific third-party OAuth connection    |
| **Send notification**  | Alert someone via Slack, Teams, or email          |
| **Review app access**  | Open an app's access view for manual review       |
| **Manual task**        | A free-text checkbox task for the assigned person |
| **Wait**               | Pause until a condition is met or time elapses    |

## Creating a playbook

Playbooks are configured by workspace admins. To create one:

1. Go to **Workflows → Playbooks**
2. Click **New Playbook** (admin only)
3. Give it a name and description
4. Add steps in sequence — set the type, description, and assignee for each
5. Save

### Example: Employee offboarding

```
Step 1 — Send pulse to departing employee
         "Your access will be removed in 24h. Do you need to export any data?"

Step 2 — Revoke top OAuth grants
         Review and revoke grants held by this user

Step 3 — Review all app access
         Open user's Accounts view, remove access not handled by SSO deprovisioning

Step 4 — Send notification to manager
         "SaaS access removal complete for [Employee Name]"

Step 5 — Manual task — update app catalog contacts
         Remove the employee from any billing contact fields in the Apps catalog
```

## Running a playbook

### Manual run

1. Go to **Workflows → Playbooks**
2. Find the playbook card
3. Click **Run**
4. Set the context (e.g. the employee being offboarded)
5. The run is created and assignees are notified of their steps

### Triggered by a rule

Playbooks can be triggered automatically when a [Rule](/governance/rules) fires — for example, trigger the offboarding playbook whenever a user is deactivated in your directory sync.

## Tracking a run

Open any active run from the banner or from a playbook's run history to see:

* Each step with its current status (pending, in progress, complete, skipped)
* Who completed each step and when
* Notes added during completion
* Overall run progress

All run history is preserved in the audit log.

## Built-in starter playbooks

Porcia provides pre-configured starter playbooks you can use as-is or customize:

* **Employee offboarding** — SaaS access review and removal
* **Access review** — periodic review of who has access to a specific app
* **Shadow IT remediation** — evaluate and act on a newly discovered shadow app
* **Vendor offboarding** — remove all users and revoke access when cancelling a contract

## Next steps

<CardGroup cols={2}>
  <Card title="Pulses" icon="bell" href="/governance/pulses">
    Employee outreach that feeds into playbook steps
  </Card>

  <Card title="Rules" icon="bolt" href="/governance/rules">
    Trigger playbooks automatically on events
  </Card>

  <Card title="OAuth Grants" icon="plug" href="/governance/oauth-grants">
    Revoke grants as a playbook step
  </Card>

  <Card title="Access Requests" icon="clipboard-list" href="/governance/access-requests">
    The request workflow that feeds into provisioning playbooks
  </Card>
</CardGroup>