When LCS is terminated or on leave we need keep AP and entitlements must be in place and account should be disabled. How to to do this?
In the respective Identity Profile, under the terminated Lifecycle State, select “Disable” and choose the sources for which the accounts need to be disabled.
Ensure that there are no roles with assignment criteria based on the lifecycle state, as a change in a user’s lifecycle state from active to terminated or leave could cause the criteria to fail, resulting in the removal of associated roles, access profiles, or entitlements