Confirm an account getting deleted without being disabled
F
Frank Reiffers
An option to enable a threshold that prevents an AD account from being deleted unless it has been disabled first.
Sometimes an HR employee enters the contract end date incorrectly (for example 2025 instead of 2026). As a result, the employee falls out of the API (Beaufort) scope and the AD account is deleted immediately.
R
Rick van den Dijssel
Hey Frank Reiffers, thanks for your feedback! I have a few more questions for you:
- What specific conditions or criteria should trigger the threshold to prevent account deletion?
- How often do these incorrect contract end dates occur, and what is the impact on your operations?
- Would you prefer a notification system to alert HR before an account is deleted, or is the threshold mechanism sufficient?
F
Frank Reiffers
Rick van den Dijssel
- We have a business rule that deletes the account after 30 days. Its odd if a person goes from active to deleted since the normal route would be active, disabled and then deleted. So that could be a trigger if the person skips a certain business rule.
- Not that often, its generally a mistake by HR but when it happens it's quite a hassle especially if the account is recreated before you are able to restore it.
- For me a threshold mechanism is sufficient. Similar to how target systems handle the threshold only here it would be max 1 person I guess.