Hi,
Our customer wants to implement a functionality in One Identity that would remove all entitlements except one from the Azure AD accounts of users who are in the leaver process and are disabled. The accounts currently have account definitions assigned, and the manage level is set to remove group assignments from disabled users. How can we ensure that one of the license assignments is retained while the account is disabled?
We attempted to handle this case by updating the value calculation template for the AADUserHasSubsku.xIsineffect attribute, but it did not work. It appears that the database procedure [dbo].[AAD_ZUserHasSubSku] updates xisineffect values even if it should change according to the template.
Any available help would be greatly appreciated.
-Arttu
