DaemonLayer Logo
Automation

Automation that knows its limits

DaemonLayer resolves common IT requests without engineer involvement. When it cannot complete a task, it exits cleanly and routes to your service desk with full context. No ticket ever falls through silently.

Coverage

Domains covered by automation

DaemonLayer ships with automation across four domains that represent the majority of L1 volume for most MSPs. Each domain is opt-in: enable only what you are ready to automate.

01
Identity & Access

Password resets with identity verification, account unlocks, and group membership changes executed directly against the user's Microsoft 365 tenant. No technician touches the admin centre.

02
Mailbox Management

Delegate access, forwarding rules, shared mailbox permissions, send-on-behalf rights, and out-of-office configuration, handled via natural language from the original ticket.

03
User Profile Changes

Display name, job title, department, phone number, and manager assignments updated directly in Microsoft 365 and written back to your PSA ticket as a structured note.

04
General Support

AI-generated first replies for common informational requests, informed by your historical ticket resolutions and the specific context of the requester.

How It Works

Confidence-first routing

Automation does not run on every ticket. It runs on tickets where DaemonLayer is confident enough to act. Everything else routes to your team with context already attached.

01

Triage assigns a confidence score

When a ticket arrives, the triage engine classifies the request and produces a confidence score. That score, not a rule you write, determines whether automation runs or the ticket goes to your team.

02

Above threshold, automation runs

If the score meets your configured threshold and a matching workflow is enabled, it executes automatically. Below threshold, the ticket routes to your service desk already enriched with AI analysis.

03

Workflows chain automatically

Triage hands off to the correct workflow without any per-ticket configuration. If a workflow encounters a problem it cannot resolve, it exits cleanly and routes to the service desk with a clear explanation of what was attempted.

Human-in-the-Loop

Approval gates are a first-class feature

Any workflow can be configured to pause and wait for explicit approval before a sensitive action executes. HITL is not a workaround. It is how MSPs deploy automation at their own pace.

Per-workflow approval gates

Gate any individual workflow. Before a sensitive action executes, an admin receives an approve/reject request with full context: requester, target, action, and risk level. You decide the granularity.

Approve from wherever you work

Approval requests surface directly inside your PSA panel, via email notification, or from the DaemonLayer dashboard. No context-switching. Approve or reject in one click.

Configurable timeout with safe fallback

Approvals time out after a configurable window (default 24 hours). If no response is received, the workflow exits and the ticket falls back to the service desk automatically. No ticket is ever left in limbo.

The Safety Net

The Service Desk workflow is always on

The Service Desk workflow cannot be disabled. Every failed automation, every approval timeout, and every ticket below the confidence threshold routes here automatically.

  • Technician receives a clear explanation of what was attempted and why it stopped
  • Full triage context, extracted signals, and related tickets are already attached
  • No ticket ever reaches the queue without context, regardless of automation outcome

Deployment Model

Enable only what you are ready to automate

Every workflow is opt-in per MSP. Start with the domains that carry the highest confidence and the lowest risk, then expand at your own pace. There is no requirement to automate everything on day one.

Confidence thresholds are configurable. If you want DaemonLayer to act only when it is 90% confident, set that threshold. Everything below routes to your team, already enriched and triaged.

Opt-in
Every workflow is enabled individually, per MSP
Always on
Service Desk fallback cannot be removed
70%+
Typical automation rate for MSPs running full L1 coverage

Related

Ready to see it in your environment?

A 30 minute walkthrough on your PSA setup. We show exactly what DaemonLayer would handle for your team, on your data, with no obligation.

No sales deck. No obligation. Live walkthrough on your environment.