Questions and Playbooks

Copy a short question for common work, or open a guided Playbook for a structured investigation.

Question library

Start with the question

Browse 124 concise examples for sales, finance, service, projects, security, and operations. Edit the brackets and copy.

Browse questions

Current coverage

124
questions
5,200+
integration specs
14
work areas

Examples show what to ask when the relevant Apps and permissions are available. They do not imply every App supports every question.

Guided playbooks

Go deeper when the work needs a procedure

These guides add inputs, source types, expected output, and repeatable steps for common IT and service work.

23 Playbooks

Guided Playbooks

Service desk

Triage service ticket

Investigate a service ticket, identify likely cause and impact, and recommend the next action using current evidence.

Uses Service tickets and Customer records

Open guide

Security

Investigate client security

Collect and correlate security evidence for one customer, then prioritize remediation.

Uses Security findings and Security assets

Open guide

Customer success

Prepare client review

Prepare a concise client review from operational, device, identity, documentation, and security evidence.

Uses Customer records and Service tickets

Open guide

Identity

New-user onboarding readiness

Check the identities, licenses, groups, devices, and documentation needed for a complete new-user onboarding.

Uses User directory and Licensing

Open guide

Identity

User offboarding audit

Audit an offboarding request and prepare a clear removal and preservation plan.

Uses User directory and Groups and access

Open guide

Security

Compromised-account investigation

Investigate a suspected identity compromise and prepare evidence-backed containment options.

Uses Identity security and User directory

Open guide

IT operations

Device health investigation

Assess the current health and operational risk of one managed device.

Uses Managed devices and Device alerts

Open guide

Service desk

Alert-to-ticket enrichment

Enrich an RMM or security alert with customer, asset, identity, and ticket context.

Uses Device alerts and Managed devices

Open guide

Service desk

Recurring ticket investigation

Determine whether repeated tickets share an underlying user, device, service, or process cause.

Uses Service tickets and Ticket history

Open guide

Identity

Microsoft 365 service-impact investigation

Determine the scope and likely cause of a Microsoft 365 service problem.

Uses User directory and Identity security

Open guide

Resilience

Backup failure investigation

Explain recent backup failures and assess likely recovery risk.

Uses Backup jobs and Asset inventory

Open guide

Resilience

Patch-compliance review

Review patch posture and prioritize devices requiring technician attention.

Uses Managed devices and Device policies

Open guide

Security

Security-baseline review

Review a customer security baseline using current identity, endpoint, and vulnerability evidence.

Uses Identity security and Identity configuration

Open guide

Identity

License-optimization review

Identify likely license waste and entitlement gaps, with evidence for the next review.

Uses Licensing and User directory

Open guide

IT operations

Warranty and lifecycle review

Assess hardware lifecycle and replacement priorities across a customer estate.

Uses Asset lifecycle and Asset inventory

Open guide

IT operations

Documentation-gap audit

Compare discovered assets and identities with approved documentation to find missing or stale records.

Uses Documentation and Customer records

Open guide

Customer success

Client onboarding discovery

Build a bounded discovery and gap report for a newly managed customer.

Uses Customer records and Customer contacts

Open guide

Customer success

Client offboarding/export readiness

Assess what must be transferred, retained, or verified before a customer relationship ends.

Uses Customer records and Customer contacts

Open guide

Service desk

Ticket assignment and prioritization

Recommend the queue, priority, and technician profile for a service ticket.

Uses Service tickets and Customer records

Open guide

Service desk

Ticket response preparation

Prepare an accurate customer-facing ticket update from the latest ticket history and evidence.

Uses Service tickets and Ticket history

Open guide

Service desk

Resolution verification

Verify that reported remediation addressed the original ticket symptoms before closure.

Uses Service tickets and Ticket history

Open guide

IT operations

Change preparation

Prepare evidence, dependencies, validation steps, and rollback considerations for a proposed change.

Uses Service tickets and Ticket history

Open guide

IT operations

Post-change validation

Compare observed post-change state with the approved plan and expected outcomes.

Uses Service tickets and Ticket history

Open guide

How to use a Playbook

  1. 01Choose a task

    Open the guide that matches the work you need to do.

  2. 02Add the inputs

    Replace the bracketed values and remove optional lines you do not need.

  3. 03Paste and review

    Run it in your connected AI client and review the evidence before acting.