After upgrading to ARS 7.2.1 some users are no longer able to be disabled.

Question

After upgrading to ARS 7.2.1 some users are no longer able to be disabled. The option is gone from the right click context menu for the user in the console. There is an option to deprovision, but not disable. I'm unable to figure out why. Two different users accounts in the same OU, one will have the disable option, and another will not. Does anyone know why this might be?

Nick.Dollimount · Answer

Hello, I would suggest checking the access templates that are linked on each of those users directly. It sounds like some may have some links applied directly to the user object. Easiest way to check is to make sure the Advanced Details Pane is enabled in the View menu. You can then select each user individually to see the access templates applied in the bottom pane under the Active Roles Security tab. In that same pane, there is a column called 'Directory Object'; this is the object that the access template is applied to. So if there are any entries that show the user object listed under that column, you know that it's applied to that object directly. I hope this helps.

Endpoint Privilege Management

After upgrading to ARS 7.2.1 some users are no longer able to be disabled.