# Search for accounts with inactive lifecycle state but active in Source

**URL:** <https://developer.sailpoint.com/discuss/t/search-for-accounts-with-inactive-lifecycle-state-but-active-in-source/148015>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud\
**Created:** [June 24, 2025, 8:38pm UTC](https://developer.sailpoint.com/discuss/t/search-for-accounts-with-inactive-lifecycle-state-but-active-in-source/148015 "2025-06-24T20:38:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jackeeturner](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@jackeeturner](https://developer.sailpoint.com/discuss/u/jackeeturner)\
**Post date:** [June 24, 2025, 8:38pm UTC](https://developer.sailpoint.com/discuss/t/search-for-accounts-with-inactive-lifecycle-state-but-active-in-source/148015/1 "2025-06-24T20:38:49Z")

</div>

I am looking for some Search assistance. I am trying to write a search query that will return identities who are in the inactive lifecycle states but, remain active in a source. I’ve attempted a few different iterations but the results are not what I’m reaching for.

Example: Employee has been disabled in active directory but, has become enabled manually after the event has taken place. I would like to know that their cloud lifecycle state is inactive but, there is an account within the active directory source enabled.

Search Query: attributes.cloudLifecycleState:INACTIVE AND source.name:“WakeMedAD” AND accounts.source.name:“WakeMedAD” AND accounts.disabled:false

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [June 24, 2025, 8:45pm UTC](https://developer.sailpoint.com/discuss/t/search-for-accounts-with-inactive-lifecycle-state-but-active-in-source/148015/2 "2025-06-24T20:45:51Z")

</div>

attributes.cloudLifecycleState:INACTIVE AND @accounts(source.name:“Active Directory” AND disabled:false)

---

<div class="post-metadata">

**Author:** ![pattabhi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pattabhi/32/25700_2.png) [@pattabhi](https://developer.sailpoint.com/discuss/u/pattabhi)\
**Post date:** [June 24, 2025, 8:48pm UTC](https://developer.sailpoint.com/discuss/t/search-for-accounts-with-inactive-lifecycle-state-but-active-in-source/148015/3 "2025-06-24T20:48:31Z")

</div>

Hi @jackeeturner

Please check the below search query.

attributes.cloudLifecycleState:INACTIVE AND @accounts(source.name:“WakeMedAD” AND disabled:false)

the below search works fine in my tenant where source name is: Active Directory

attributes.cloudLifecycleState:INACTIVE AND @accounts(source.name:“Active Directory” AND disabled:false)

---

<div class="post-metadata">

**Author:** ![jackeeturner](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@jackeeturner](https://developer.sailpoint.com/discuss/u/jackeeturner)\
**Post date:** [June 25, 2025, 1:35am UTC](https://developer.sailpoint.com/discuss/t/search-for-accounts-with-inactive-lifecycle-state-but-active-in-source/148015/4 "2025-06-25T01:35:33Z")

</div>

Thank you so much! This worked perfectly 🙂

---

<div class="post-metadata">

**Author:** ![jackeeturner](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@jackeeturner](https://developer.sailpoint.com/discuss/u/jackeeturner)\
**Post date:** [June 25, 2025, 1:36am UTC](https://developer.sailpoint.com/discuss/t/search-for-accounts-with-inactive-lifecycle-state-but-active-in-source/148015/5 "2025-06-25T01:36:06Z")

</div>

Thank you so much! I really appreciate your response to this.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [August 24, 2025, 1:37am UTC](https://developer.sailpoint.com/discuss/t/search-for-accounts-with-inactive-lifecycle-state-but-active-in-source/148015/6 "2025-08-24T01:37:03Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.