Hello,
I am trying to build out an automation for user account disablement for our organization. The basic process we want is:
Disable user account
Reset user password
Move user account to disabled user OU
Document user attributes and group membership
Remove all group membership
Email documented attributes and group memberships to user's manager, and Identity Management team.
Wait 365 days
Delete user account
I'm working on some scripts to document the attributes in question and group memberships, but I am unclear how to route the output of that script into an email notification from ADManager. Also, given the long wait time for the account deletion should I even try to include that in the automation? I'm thinking it might be better to just use a separate automation to delete accounts within a specific OU that have been disabled for more than 365 days? Thoughts?
Thank you in advance.
Jason