You can use the Active Roles Web Interface to disable a user for logon to Azure. This allows you to disable a previously enabled user in Azure AD while retaining all the Azure settings that were configured for the user. The Azure AD user settings are retained for a disabled account. Hence you can re-enable a disabled user again without having to reconfigure the user.
To disable a previously enabled user for Azure
-
On the Active Roles Web Interface navigation bar, click Directory Management.
-
On the Views tab in the Browse pane, click Active Directory.
The list of Active Directory domains is displayed.
-
Click the specific domain, container or the Organizational Unit, and then the specific user that you want to disable.
-
In the Command pane, click Disable.
The account is disabled and marked with a disabled icon.
If you want to enable a previously disabled Azure AD user, see Enabling an Azure AD user.