Is it possible to configure Access Templates to delegate permissions to a trustee to only DISABLE or only ENABLE a user account?
Unfortunately it is not possible to set Access Templates to delegate permission to a trustee to only DISABLE a user or only ENABLE a user, as there is only one object property which controls this state “Account is Disabled”. This attribute can be either yes or no, therefore you cannot give permission for only “Yes” on only “No” the permission would be on the attribute itself “Account is Disabled” not the value.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center