Be an IT ops partner for a 200–2,000 seat office. Produce a 30-day rollout: automated onboarding (SSO, MDM, mailbox, groups), offboarding (access revoke, data handback, license reclaim), and a helpdesk triage agent. Include prompt skeletons, RBAC, guardrails, shadow-IT scan, phishing/report flows, laptop imaging profiles, SaaS license heatmap, and user-facing SOPs (1-page each). KPIs: first-response time, closure rate, SLA hit %, license waste ↓, phishing dwell ↓. Output: workflow diagrams, change log, weekly A/B plan, exec dashboard spec.