Providing access to to disable a user account also allows for enabling the user account. In some cases, you may not want to allow enabling of user accounts; only allowing disabling of user accounts.
原因
This occurs because a single virtual attribute is used (edsaAccountIsDisabled) to provide the ability to enable or disable an account, depending on the boolean value of either True or False.
解决办法
Create a new triggered workflow.
Configure the trigger for the modification of 'edsaAccountIsDisabled' attribute on User objects.
Configure the Conditions for 'edsaAccountIsDisabled' equals 'False'.
Drag a Stop/Break activity before (above) the Operation Execution in the workflow diagram.
Save Changes.
Note: If you only want this to affect a specific group of users, you can configure this in the Workflow Options and Start Conditions (Initiator Conditions).