# Disable NERM Account

**URL:** <https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603>\
**Category:** SHF Discussion and Questions\
**Tags:** nerm, sailpoint-identity-security\
**Created:** [April 9, 2025, 5:14pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603 "2025-04-09T17:14:20Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![ArefSadeghi](https://avatars.discourse-cdn.com/v4/letter/a/ce7236/32.png) [@ArefSadeghi](https://developer.sailpoint.com/discuss/u/ArefSadeghi)\
**Post date:** [April 9, 2025, 5:14pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/1 "2025-04-09T17:14:20Z")

</div>

Hi Everyone,  
I was wondering if there was a way to disable an account in NERM. I know a profile’s status could be set to Terminated but I would like to see if the profile itself can be disabled so that it shows Disabled in ISC once the account is aggregated.

Thanks in advance!

---

<div class="post-metadata">

**Author:** ![sanekkanti](https://avatars.discourse-cdn.com/v4/letter/s/3bc359/32.png) [@sanekkanti](https://developer.sailpoint.com/discuss/u/sanekkanti)\
**Post date:** [April 9, 2025, 5:32pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/2 "2025-04-09T17:32:26Z")

</div>

Hi

To ensure that this status change is reflected as **Disabled** in Identity Security Cloud (ISC) upon aggregation, you’ll need to configure attribute mappings appropriately. This involves mapping the NERM profile status attribute (e.g., `status`) to the ISC lifecycle state attribute (`cloudLifecycleState`) and setting up a transformation rule that translates the **Inactive** status from NERM to **Disabled** in ISC. This mapping ensures that when a profile is marked as **Inactive** in NERM, it appears as **Disabled** in ISC after aggregation.​

P.S - ISC reflects the status received from NERM based on these mappings and does not alter the original profile status in NERM.

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [April 9, 2025, 5:32pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/3 "2025-04-09T17:32:46Z")

</div>

I dont think Disabled is one of the predefined status in NERM however you can create a new attribute in NERM, map TERMINATED to Disabled and use that.

---

<div class="post-metadata">

**Author:** ![sanekkanti](https://avatars.discourse-cdn.com/v4/letter/s/3bc359/32.png) [@sanekkanti](https://developer.sailpoint.com/discuss/u/sanekkanti)\
**Post date:** [April 9, 2025, 5:36pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/5 "2025-04-09T17:36:12Z")

</div>

Yeah, this is the easier way you can achieve this as we don’t have a predefined status to Disable in NERM.

---

<div class="post-metadata">

**Author:** ![ArefSadeghi](https://avatars.discourse-cdn.com/v4/letter/a/ce7236/32.png) [@ArefSadeghi](https://developer.sailpoint.com/discuss/u/ArefSadeghi)\
**Post date:** [April 9, 2025, 5:46pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/6 "2025-04-09T17:46:24Z")

</div>

![Screenshot 2025-04-09 at 12.46.46 PM](https://global.discourse-cdn.com/sailpoint/original/3X/e/e/ee349dc8e3a02788bee8e0f97d6c41eeea37d337.png)  
I mean for this to be disabled. We already have the lifecycle state configured. It makes no difference to the functionality of what we are trying to do but we want to see that Enabled changed to Disabled.

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [April 9, 2025, 7:08pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/7 "2025-04-09T19:08:43Z")

</div>

I am assuming you are WebService connector, and have you done the mapping under Connection Settings → Account Enable Status Attribute, have you added status=Active?

---

<div class="post-metadata">

**Author:** ![ArefSadeghi](https://avatars.discourse-cdn.com/v4/letter/a/ce7236/32.png) [@ArefSadeghi](https://developer.sailpoint.com/discuss/u/ArefSadeghi)\
**Post date:** [April 10, 2025, 1:54pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/8 "2025-04-10T13:54:10Z")

</div>

No, we are using the OOTB Nerm connector.

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [April 10, 2025, 4:51pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/9 "2025-04-10T16:51:40Z")

</div>

Isn’t that supposed to be used as an auth source?

---

<div class="post-metadata">

**Author:** ![ArefSadeghi](https://avatars.discourse-cdn.com/v4/letter/a/ce7236/32.png) [@ArefSadeghi](https://developer.sailpoint.com/discuss/u/ArefSadeghi)\
**Post date:** [April 10, 2025, 8:53pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/10 "2025-04-10T20:53:18Z")

</div>

Yes, it is an auth source.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 9, 2025, 8:53pm UTC](https://developer.sailpoint.com/discuss/t/disable-nerm-account/109603/11 "2025-06-09T20:53:45Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
