Assign project access groups for new joiners before onboarding

Your entitlement requests arrive by webhook and cause delayed access, repeated manual grants, and stalled onboarding. IT receives consistent project group memberships so hires can start first-day tasks before onboarding completes.