Ill check out Protectli, thanks!

Can you tell more about hardware/mini PC you have?

This sounded like a techy Ron Swanson.

Honestly I cant find the exact one, but Reza Dorrani probably has this in his vids or you can go with something like this:

https://youtu.be/cC-skWfWOXQ

Tldr - in PowerApps you design the form and buttons, which set a value on a sharepoint list, after which you can set up the view as shown on the vid ive shared. I wish i could help more, but my PowerApps/Automate knowledge is limited.

PowerApps + PowerAutomate then? If you have such licenses and wanna go native MS then this works like a charm, even on mobile. Doesnt take long to prepare, i think it is even a PA example that MS has. Ill try to find it.

Edit: I know this is a selfhosted community but MS tools work well with MS tools :D

Afaik, MS Teams now has a native status thing, which shows you as either in Office or WfH. Would that suffice?

Edit: it doesn’t show up on my iOS app, so maybe it is on desktops only.

Honestly, it depends on your role within the company as well - if you are a CxO or from IAM/UAM domain, then you can just define a model for this particular “tool” and announce the upcoming change (ie prepare the roles and all, and then clean up existing roles/accesses) that X will happen in next, lets say, 45 days. This will make everyone jump on you of course, buuuuut thats what you want, as at least you will suddenly get people msging you regarding the “why” they need xyz role - et voila you now have your high level list of processes; adjust roles where needed and continue.

My view on this is that it also kinda depends on the company hierarchy and its sector, but you should be a little dictator - youll reap the rewards for being effective; its the others who ignored your call2action who are to blame :D

Create a model based on processes? Eg least priv for helpdesk for passwords, machine/intune mngt, etc., call it L1. Then add some roles for reporting, wiping/isolating machines or similar for the security team (call it L2 admin), etc.