Add new managers to directory groups before first day access

Your new hire records arrive without required directory group memberships, causing access delays and provisioning backlogs. IT and onboarding get manager accounts placed in the correct groups to remove last‑minute access blockers before the new hire's first day.