Questions and Playbooks
Copy a short question for common work, or open a guided Playbook for a structured investigation.
Question library
Start with the question
Browse 124 concise examples for sales, finance, service, projects, security, and operations. Edit the brackets and copy.
Browse questionsCurrent coverage
- 124
- questions
- 5,200+
- integration specs
- 14
- work areas
Examples show what to ask when the relevant Apps and permissions are available. They do not imply every App supports every question.
Guided playbooks
Go deeper when the work needs a procedure
These guides add inputs, source types, expected output, and repeatable steps for common IT and service work.
23 Playbooks
Guided Playbooks
Service desk
Triage service ticket
Investigate a service ticket, identify likely cause and impact, and recommend the next action using current evidence.
Uses Service tickets and Customer records
Open guideSecurity
Investigate client security
Collect and correlate security evidence for one customer, then prioritize remediation.
Uses Security findings and Security assets
Open guideCustomer success
Prepare client review
Prepare a concise client review from operational, device, identity, documentation, and security evidence.
Uses Customer records and Service tickets
Open guideIdentity
New-user onboarding readiness
Check the identities, licenses, groups, devices, and documentation needed for a complete new-user onboarding.
Uses User directory and Licensing
Open guideIdentity
User offboarding audit
Audit an offboarding request and prepare a clear removal and preservation plan.
Uses User directory and Groups and access
Open guideSecurity
Compromised-account investigation
Investigate a suspected identity compromise and prepare evidence-backed containment options.
Uses Identity security and User directory
Open guideIT operations
Device health investigation
Assess the current health and operational risk of one managed device.
Uses Managed devices and Device alerts
Open guideService desk
Alert-to-ticket enrichment
Enrich an RMM or security alert with customer, asset, identity, and ticket context.
Uses Device alerts and Managed devices
Open guideService desk
Recurring ticket investigation
Determine whether repeated tickets share an underlying user, device, service, or process cause.
Uses Service tickets and Ticket history
Open guideIdentity
Microsoft 365 service-impact investigation
Determine the scope and likely cause of a Microsoft 365 service problem.
Uses User directory and Identity security
Open guideResilience
Backup failure investigation
Explain recent backup failures and assess likely recovery risk.
Uses Backup jobs and Asset inventory
Open guideResilience
Patch-compliance review
Review patch posture and prioritize devices requiring technician attention.
Uses Managed devices and Device policies
Open guideSecurity
Security-baseline review
Review a customer security baseline using current identity, endpoint, and vulnerability evidence.
Uses Identity security and Identity configuration
Open guideIdentity
License-optimization review
Identify likely license waste and entitlement gaps, with evidence for the next review.
Uses Licensing and User directory
Open guideIT operations
Warranty and lifecycle review
Assess hardware lifecycle and replacement priorities across a customer estate.
Uses Asset lifecycle and Asset inventory
Open guideIT operations
Documentation-gap audit
Compare discovered assets and identities with approved documentation to find missing or stale records.
Uses Documentation and Customer records
Open guideCustomer success
Client onboarding discovery
Build a bounded discovery and gap report for a newly managed customer.
Uses Customer records and Customer contacts
Open guideCustomer success
Client offboarding/export readiness
Assess what must be transferred, retained, or verified before a customer relationship ends.
Uses Customer records and Customer contacts
Open guideService desk
Ticket assignment and prioritization
Recommend the queue, priority, and technician profile for a service ticket.
Uses Service tickets and Customer records
Open guideService desk
Ticket response preparation
Prepare an accurate customer-facing ticket update from the latest ticket history and evidence.
Uses Service tickets and Ticket history
Open guideService desk
Resolution verification
Verify that reported remediation addressed the original ticket symptoms before closure.
Uses Service tickets and Ticket history
Open guideIT operations
Change preparation
Prepare evidence, dependencies, validation steps, and rollback considerations for a proposed change.
Uses Service tickets and Ticket history
Open guideIT operations
Post-change validation
Compare observed post-change state with the approved plan and expected outcomes.
Uses Service tickets and Ticket history
Open guideHow to use a Playbook
- 01Choose a task
Open the guide that matches the work you need to do.
- 02Add the inputs
Replace the bracketed values and remove optional lines you do not need.
- 03Paste and review
Run it in your connected AI client and review the evidence before acting.