One Identity Active Roles can do many things to make your Active Directory account management more efficient and secure. As Active Roles can manage all changes that take place around a user’s tenure with an organization from the moment they are hired through the day they depart, these changes include provisioning access, setting up a Microsoft Office 365 license, adjust permissions as their role changes and ultimately making their account inactive (deprovision) to protect your organization.