I’m a bit unclear about one part — as you mentioned, when the lifecycle state (LCS) changes to ‘Inactive’, the account is already being disabled, moved to the specific OU, and group memberships are removed. Could you clarify why you’re asking specifically about moving the account and removing access again? If you could share more details about your use case or the scenario you’re trying to handle, I’d be happy to help further.