Hi,
You can use the DISABLE/ENABLE provisioning policies to move OUs like shown here:
There are more forum posts about this. I would suggest to use ENABLE/DISABLE policies and not the UPDATE/MODIFY ones. Using ENABLE/DISABLE makes sure the actions are taken an account is enabled or disabled, which should happen through lifecycle states ideally.
A question I have on the matter. According to the best practices from the vendor,
we should be using the before provisioning rule but that makes any change made more time consuming than it needs to be. Seeing from personal experience as well as posts from Ambassadors that the provisioning policies work just fine, do we have a reason to use the Rule or the Standard Sailpoint Rule if the requirements can be satisfied using just the provisioning policies?