A large enterprise wants to automate onboarding tasks so that when a new employee record appears in the HR system and syncs to Microsoft Entra ID, the account is automatically enabled, assigned to the correct groups, and receives a welcome email on their start date. They also want offboarding tasks to run automatically on the employee's last day. Which Microsoft Entra ID Governance capability should they use?