IT Portal
Tubers Academy · Systems Administration · All Centres
—
Active Staff ↗
—
Pending Starters ↗
0
Offboarded (30d) ↗
Upcoming Starters
| Name | Role | Centre | Manager | Start | Status | |
|---|---|---|---|---|---|---|
| No upcoming starters | ||||||
Recent Activity
No recent activity
Centres and Remote
Torquay HQ
The Old Bank Chambers · TQ1 4PR
— staff
Torquay
Parkfield House
— staff
Exeter
4 Mitre Lane · EX4 3BB
— staff
Taunton
Chiltern House · TA1 3DH
— staff
Barnsley
4 Maple Park · S75 3DP
— staff
Remote
Work from home
— staff
New Starter
Accounts are created automatically on the start date at 07:00.
1
Details2
Role & Access3
Review4
DonePersonal Details
Role and Access
Accounts to be Created
Select a role above to see systems
Review and Confirm
ℹAccounts will be created at 07:00 on the start date. A welcome email will be sent to the personal address with all setup links.
Welcome Email Preview
Scheduling
ℹScheduled for at 07:00. You can close this page safely.
Offboarding
Suspend system access and generate the IT checklist.
Planned Leaver
Schedule for final working day
Immediate
Suspend all access now
Actions
Suspend Google Workspace accountGoogle Admin SDK
Set out-of-office auto-replyGmail API
Deactivate Slack accountSlack API
Unassign assets in AssetBotsAssetBots API
Email IT Lead — manual checklist for remaining systemsGmail API
Email line manager — device return instructionsGmail API
Schedule permanent Google deletion — 30 daysScheduled
Type the staff member's full name exactly to confirm offboarding.
Staff Directory
Live from Google Workspace — all active accounts.
Loading from Google Workspace...
Inventory
Live from AssetBots — all devices across all centres.
—
Total Assets
—
Available
—
Assigned
Loading from AssetBots...
Documents
All IT policies and operational documents.
Governance
IT Governance Policy v1.0
Leadership — June 2025
Staff IT Handbook v1.0
All Staff — June 2025
Data Breach Response Plan v1.0
DPO and IT Lead — June 2025
Student AUP
In progress
Operations
IT Operations Manual v1.0
IT Lead — June 2025
Identity and Access Pack
In progress
Device Management Pack
In progress
Sign-off Status
Handbook not yet circulated
Send via onboarding flow when ready
API Configuration
Keys are stored in Cloudflare Worker environment variables — not here. Status only.
ℹSet keys in Cloudflare: Workers and Pages > tubers-it-portal > Settings > Variables. Never paste keys into this interface.
Integration Status
Google Workspace — Admin SDK
Account creation, OU, profile photo, Gmail send, Drive
Awaiting service account
Slack API
tubershq.slack.com — workspace invitations
Awaiting bot token
AssetBots API
Person record creation and asset management
Awaiting API key
Passwd
Auto-synced from Google Workspace — no API key needed
Auto-sync
Cloudflare Access — Google SSO
@tubers.uk only — configure after deployment
Post-deploy
Cron — Daily scheduler
Runs at 07:00 UTC — processes starters due that day
Active after deploy
Deployment Steps
1
Google Cloud — Service Account
console.cloud.google.com → IAM → Service Accounts → Create → Enable domain-wide delegation → Download JSON
2
Google Admin — Authorise service account
admin.google.com → Security → API Controls → Domain-wide Delegation → Add Client ID
3
Slack — Create app and get bot token
api.slack.com/apps → Create App → OAuth → Bot Scopes: users:write, users:read, users:read.email, chat:write → Install → Copy xoxb- token
4
AssetBots — Generate API key
assetbots.com → Settings → API Keys → Generate
5
Cloudflare — Create KV namespace and deploy Worker
KV → Create "PORTAL_KV" → Copy ID into wrangler.toml → wrangler deploy → Set secrets via wrangler secret put
6
Cloudflare Access — Google SSO
Zero Trust → Access → Applications → Add → Self-hosted → Domain: it.tubers.uk → Allow: @tubers.uk emails only