Automatic employee onboarding and offboarding with n8n

n8n use case · People and IT

How to automate employee onboarding and offboarding with n8n: a new hire registered in HR triggers a single workflow that creates the email account, assigns groups and permissions based on the role, registers the employee in Odoo and in Binovo HR, notifies IT and the manager, and prepares the first-day checklist. Offboarding runs the same path in reverse, so no access is left open.

Information reviewed on November 7, 2026. Use case implemented with n8n by Binovo FutureAI, Certified n8n Expert Partner.

The problem

Onboarding a new hire touches many tools: email, shared drives, chat, ERP, time tracking, VPN, equipment, access card. Each one is handled by a different person, usually with an email or a spreadsheet in between. The result: new hires wait days to get their access and, when someone leaves, accounts are left open.

Common symptoms

  • A first day without email, equipment or access.
  • Permissions copied from someone else, too many or too few.
  • Accounts of former employees that are still active.
  • Nobody knows what has been done and what is still missing.

What we aim for

  • Everything ready before the person arrives.
  • Permissions based on the role, not guesswork.
  • Complete offboarding on the same day.
  • A record of every onboarding and offboarding.

How n8n solves it, step by step

Scroll through the steps: on the right, the workflow node that is active at each moment lights up along with the data it handles (sample data).

n8n workflow · Employee onboardingExample
  • RHHR registrationTrigger
  • @Account and emailWorkspace or Microsoft 365
  • #Groups and permissionsBased on the role
  • OOdoo and Binovo HREmployee and time tracking
  • ITEquipment and accessTasks for IT
  • ✓First day and offboardingChecklist and offboarding
employee: Ane Etxeberria
position: systems technician
department: IT
manager: Jon
start date: 2026-11-16
account: ane.etxeberria@tuempresa.es
license: assigned
2FA: required on first login
profile: systems
groups: it, support, on-call
folders: IT / Documentation
channels: support-n2, incidents
odoo: hr.employee created, user with project permissions
binovo hr: registered, calendar: summer intensive working hours
tasks created: 3
laptop: assigned to IT, due 2026-11-13
vpn: pending manager approval
welcome: sent 2026-11-16 8:00
checklist: 9 of 10 completed
offboarding (other case): accounts suspended in 6 systems
Step 1 of 6

HR registers the new hire

The workflow starts when HR registers the person in their tool (Binovo HR, Odoo Employees or a form) with name, role, department, manager and start date. This is the only time the data is typed in.

Step 2 of 6

Their email account is created

n8n creates the account in Google Workspace or Microsoft 365 following the company’s naming format, with a temporary password delivered through a secure channel and a requirement to enable two-step verification.

Step 3 of 6

Groups and permissions based on the role

A role table defines what each profile receives: mailing lists, shared drives, chat channels, security groups and applications. The workflow applies exactly that, no more and no less.

Step 4 of 6

Registration in the ERP and in time tracking

The employee is created in Odoo with their user and permissions for their area, and in Binovo HR for time tracking, vacations and payroll, with their work calendar.

Step 5 of 6

IT receives its tasks with due dates

Whatever cannot be fully automated becomes tasks with due dates for IT or maintenance: preparing the laptop, the access card or the VPN. Each completed task is reflected in the checklist.

Step 6 of 6

Welcome checklist and, when the time comes, offboarding

The manager receives the first-day checklist and the new hire gets a welcome email with everything they need. When someone leaves, the reverse workflow suspends accounts, removes permissions, transfers files to the manager and records every step.

Applications involved

Application Role in the workflow
Binovo HR or Odoo Employees Source of onboarding and offboarding, employee record and time tracking.
Google Workspace or Microsoft 365 Accounts, licenses, groups and shared drives.
Microsoft Teams or Slack Team channels and notifications to the manager.
Odoo User, permissions by area and employee.
Ticketing or task tool Tasks with due dates for IT and maintenance.
Active Directory, VPN or access control API integration when the tool offers one.

Do you use other applications? n8n has more than 2,000 integrations and connects with any program that has an API. We cover this in n8n integrations.

For time tracking, vacations and payroll, we have our own product, Binovo HR, which is part of the workflow like any other tool. And if we manage your systems, the workflow is coordinated with our systems administration service.

Variants of the same use case

Role change

When someone changes department, groups and permissions are adjusted automatically according to the new profile.

Temporary staff

Access with an expiration date that is removed automatically when the contract ends.

External suppliers

Guest accounts with limited permissions and periodic review.

Access review

A quarterly report compares who has access to what with what their role calls for.

Control, security and human in the loop

  • Minimal personal data: only the data needed for each system is transferred, as required by the GDPR.
  • Passwords outside the workflow: temporary credentials are delivered through a secure channel and expire.
  • Approvals: sensitive permissions, such as VPN or systems administration, require the manager’s approval.
  • Immediate offboarding: account suspension doesn’t wait for anyone, and it is logged for auditing.

What we measure to know it works

Before starting, we take a snapshot of the current process and, once the pilot is running, we compare:

  • Time until the new hire has all their access.
  • Onboarding tasks completed before the first day.
  • Active accounts of people who are no longer with the company.
  • HR and IT hours spent on onboarding and offboarding.

How we implement it

  1. Process assessment. Volume, applications, usual exceptions and who approves what.
  2. Workflow design in n8n together with you, with the business rules documented in writing.
  3. Pilot in a controlled production environment, with human review of everything at the beginning.
  4. Go-live with error alerts, secure credentials and documentation.
  5. Maintenance and training so your team understands and adjusts the workflow.

Frequently asked questions

Can employee onboarding be automated with n8n?

Yes. A new hire registered in HR triggers a workflow that creates the email account, assigns groups and permissions based on the role, registers the employee in the ERP and time tracking, creates the IT tasks and sends the first-day checklist.

What about offboarding?

It’s the same workflow in reverse: it suspends accounts, removes permissions, transfers files to the manager and keeps a record. It is the most important part for security.

Does it work with Google Workspace and Microsoft 365?

Yes, n8n integrates with both and with their user and group administration APIs.

How are the permissions for each role defined?

With a table of profiles maintained by HR or IT. The workflow applies that table, so changing the permissions for a role doesn’t require touching the workflow.

Is it GDPR compliant?

Yes: only the data needed in each system is processed, n8n can run on your own server and every step is logged.

How long does it take today for a new hire to get all their access?

Tell us which tools you use and we’ll propose the onboarding and offboarding workflow.

Request information943 569 206

More n8n use cases

Shall we talk about your n8n automation?Request information