We are updating our terminated users policy. We have a on-prem ad synced with Azure AD and Office365. 

Currently it works like this: HR sends a request by Zendesk to IT who disables the terminated user using the Disable User function. 

We´d like the AD account to be deleted after 30 days, as a disabled account still receives emails in office 365. However we want to keep the account disabled for 30 days without deleting, in case of needing ot reactivate the user. 

I have looked at automations, but not sure that its even possible to do? Disable policy is setup and moves the user to a special "Disabled USers" ou. Disabling is done manually by IT and does not include a CSV file. After the user is disabled, id like the system to clean up that OU and delete and users who have been disabled more than 30 days.

Can it be done?