Question
We require to deactivate users only on IAM and not impact the users on target system. Please guide us with the process.
Issue:
The upstream and downstream connections in IAM raise risk for the team due to legacy configurations and data that has been imported a long time ago that has not been maintained in the target domains.
Answer
You can deactivate the user in system, by default there wont be any task created to remove access/account. It depends on the user update rule if you have configured to remove access/accounts.
Now if you have user update rule and if you want run these for specific users then you can upload the users via csv and set the option Check rules as NO, then only the status becomes active in IAM (saviynt) but there wont be any task created to update the accounts/access.
