Automation for Microsoft Entra ID and on-prem AD

We automate your service desk.

The right set of permissions follows automatically from your users' attributes, like department, location and job title. Applied across Microsoft Entra ID and your on-prem Active Directory. No more tickets for routine access.

No-obligation demo. We show you how ServiceChanger works in your situation.

10,000+
users under management
500,000+
automatic membership changes
< 2 mo
implementation time
Live ABAC engine
sync running
Entra ID
ABAC engine
Applied
Membership changes automated500,000+

The problem

Your IT team is drowning in manual access management

Managing access and licenses is manual work: every join and role change in Entra ID, and seats nobody keeps track of. Predictable, repetitive and endless, exactly the work your team has no time for.

New hires wait for days

50+ groups assigned by hand before someone can work, every onboarding again. Often an existing colleague gets copied, including rights nobody has revoked in years.

HR and IT are out of sync

A new colleague shows up at the service desk on day one and nothing is ready, because the handover between HR and IT went wrong somewhere.

You pay for licenses nobody uses

Seats stay assigned to people who left or never sign in, and renewals arrive as a surprise. You know who has a license, not who actually uses it.

This repetitive work does not belong with people. It belongs to automation.

What it does

Four modules. Everything around access, licenses, and assets.

Automate the repetitive 80% of access work and keep the 20% that needs judgment with your people. Permissions and licenses automatically follow your employees' attributes, across Microsoft Entra ID and your on-prem Active Directory.

Access

Every employee gets exactly the right permissions

ServiceChanger reads attributes from Entra ID and automatically assigns the right group memberships. Based on job title, department, or location. This is ABAC on Entra dynamic groups, extended to on-prem AD. When an attribute changes, permissions update on their own.

Read about ABAC in Entra ID

ABAC

permissions follow attributes, no scripts

License

Stop paying for licenses of people who already left

ServiceChanger tracks real license usage from sign-in activity in Entra and keeps a contract and seat registry. M365, Power BI, Intune. That is how you reclaim unused M365 licenses and see exactly which contracts are expiring.

Read how to reclaim licenses from sign-in activity

SSO

usage measured from real sign-ins

Self-Service Portal

Employees get their own access without opening a ticket

Through the self-service portal, employees see what they already have and can request additional access. Requests go directly to the right manager or owner. No email chains, no back and forth between IT and the business.

See the Self-Service Portal

Portal

requests with an approval flow

Assetcoming soon

From order to working laptop, without any manual steps

Employees order hardware through an internal shop, including installation service, documentation, and Apple DEP enrollment for iPhones. Manage your buffer stock, set bid prices per supplier, and automatically link each device to Intune. On offboarding, the device returns to stock.

See Asset Automation

Q4

2026

Groups that match your attributes, automatically recommended

ServiceChanger scans your Entra tenant and suggests which groups should link to which attributes. Saves weeks of setup.

Cloud connected in one OAuth2 click

Paste your Entra Tenant ID and grant admin consent. Cloud changes run straight through the Graph API, no certificates. Got on-prem AD groups? A PowerShell runbook on a hybrid worker runs alongside and applies the changes through your existing Entra Connect.

How it works

From attribute change to the right access.

From attribute to access, automatically

Attribute set

Department, role, location in Entra

Access

Right Entra groups assigned

By role, department, location

SSP

Request extra access yourself

Manager-approved

License

License usage tracked

M365, Power BI, Intune

Asset

Hardware ordered and linked to Intune

Coming soon

Attribute changes

Access adjusts itself

Integrations

Works with what you already run

ServiceChanger writes to your own Entra ID and Active Directory. No separate data silo, so you keep control and can stop just as easily.

Microsoft Entra IDOAuth2

Microsoft Entra ID

Native OAuth2 connection with admin consent. ServiceChanger reads your identity data and applies the group and role memberships from your rules.

Microsoft Active DirectoryRunbook + Entra Connect

Active Directory (on-prem)

For hybrid and on-prem environments. A PowerShell runbook on a hybrid worker makes the group changes in AD. Those write back to Entra through your existing Entra Connect, so cloud and on-prem stay in one access model.

Entra ID versus Active Directory in 2026

AI for your service desk

Let tickets resolve themselves with AI?
That is ITSM Autopilot.

Separate product, separate price. Runs on its own or alongside ServiceChanger.

ITSM Autopilot
itsmautopilot.com

Let AI agents resolve your tickets. Put your team's knowledge into the agents, and every resolved ticket makes your knowledge base stronger.

  • 5 pre-configured AI agents
  • Self-learning: builds its own knowledge base from solved tickets
  • Plug and play on your existing ticket system
  • Classifies and routes every ticket automatically
  • Shadow mode to observe risk-free
  • Works with Freshservice, ServiceNow, TOPdesk, Zendesk, Jira, and Halo
Visit itsmautopilot.com
Live ticket processing
#T-4892
Ticket received
VPN not working
AI matched
match found
Reply sent
from knowledge base
Classified automaticallyResolved
Ruben van der Graaf
Meet the founder
Good service is about people. Technology and AI are there to support them, not replace them. That is what I help organizations with.

Ruben van der Graaf

Founder of ServiceChanger

Read our story

More from us

Beyond the platform

One product on the way, plus services that run alongside it.

ITSM & ESM ConsultancyAvailable

servicemanagementpartner.nl

Help your IT organisation mature

We help take your IT support organisation up a level, from vision and strategy to tool selection and guiding projects.

  • Vision, strategy and maturity assessment
  • ITSM tool selection and IT advice
  • Guidance on ITSM projects
Book a call
Maturity assessment
report
StrategyProcessToolingGovernanceKnowledge
CurrentTarget
Maturity score2.4 -> 4.0
ITSM RadarSoon

itsmradar.com

Chain monitoring everyone gets: a traffic light

Map how your systems connect, plug in existing tools, and turn the status into green, amber, or red. The whole organisation sees at a glance whether it works. No login needed.

  • Overlay on SCOM, Azure Monitor and other tools
  • Traffic-light status: green, amber, red
  • Share a live dashboard, no login needed
Chain monitoring
live
Chain operational
3 of 3 steps ok
Orders receivedok
Orders in progressok
Orders pickedok
Remote ServiceDeskSoon

remoteservicedesk.nl

A remote service desk, in your ticket system

Extra capacity as an extension of your IT service desk. In your own ticket system, on your processes, for a week or ongoing.

  • In your own ticket system
  • Phone line forwarding possible
  • For a week, a month, or ongoing
Service desk queue
live
#4821Password resetNew
#4823Teams on HR laptopPicked up
#4825Outlook not syncingResolved
FlowNew → Picked up → Resolved

Pricing

Transparent per-user pricing.

Pay per connected Entra ID user. No surprises, no lock-in.

Step 1

How many Microsoft Entra ID users do you have in your tenant?

0More

500

Monthly
250.00/ month

billed annually, 30-day notice period

€0.50 per Entra ID user/month

Enterprise setup with demo and technical session. We review together whether ServiceChanger fits your Entra tenant.

Or reach us on WhatsApp for a quick intro: +31 6 13 86 31 69

Access
included
  • Automatically assigns group memberships based on job title, department, or location
  • Suggests which groups should be linked to which attributes
  • Updates permissions when someone changes role or department
  • Cleans up stale or duplicate attributes
  • Unlimited API calls included
Asset
coming soon

Annual subscription with 30-day notice period. Pricing per connected Entra ID user, billed annually.

FAQ

Frequently asked

Enterprise setup

Stop managing Entra ID by hand.

Book a no-obligation 30-minute demo. We show how ServiceChanger works and which rules deliver value in your situation.

Annual contract with 30-day notice period.