Return
-
Title
HOW TO: Prevent a User from being deleted post-Deprovision or selectively extend the date upon which the User will be deleted -
Description
After a User account has been Deprovisioned, it may occasionally be necessary to extend the Deprovision Deletion Date or prevent the user from being deleted while some operations are being performed, such as auditing or archiving. How can this be accomplished?
-
Resolution
During the Deprovision process, the User is stamped with a date and time on the edsvaDeprovisionDeletionDate attribute. This attribute contains a future date at which time the account will be deleted.This timestamp can be manually adjusted. Clearing it will prevent the user from being deleted at all, and setting the deletion date further into the future will delay the deletion.This manual editing can be done in the Active Roles Console, under the Advanced Properties of the target User.