Account definition and active directory licenses assigned to a business role are removed when identity is disabled

I think this is because your account definition doesn't have this option selected
Retain account definition if permanenty disabled

When this option is not selected and the employee is permanently deactivated the following
happens to the assignment of the account definition: XIsInEffect@PersonHasTSBAccountDef = False
So it's still assigned but not effective.

Be aware!!! that if you select the option Retain account definition if permanenty disabled
It will directly trigger a database calculation, that could reassign the account definition
and group assignments for all permanently deactivated employees that are stil assigned to the
account definition directly or indirectly.

Hi there,

Thanks for your reply. I've already selected the option Retain account definition if permanenty disabled, but it seems like it doesn't work neither for licenses, nor for AD groups.

Are you aware of any possible way to retain AD groups or licenses even after the de-activation of an identity?

Is Retain groups if permanently disabled also set in the Manage level on the Account definition?

Is Retain groups if permanently disabled also set in the Manage level on the Account definition?

Yes, it is set. Is it maybe because it is also checked Block user accounts if permanently disabled?

For this use case, it's also handy to create a new Manage Level for example: Full managed - retain groups
and set the options:
Retain groups if permanently disabled
Retain groups if user account disabled
Retain groups on deferred deletion

Hi Niels,

Thank you for your reply. I had the same idea, as a matter of fact, that's what I did. But it doesn't work...

Did you also change the Manage level on the user accounts, because the Manage Level is only set "initial" when the Account Definition is assigned.

This also happens to Google Accounts sometimes and I haven't found a reason yet. Everything is well configured in v91 and sometimes when you deactivate a user, the license is lost. 

Hi Niels, yes I did change it. Everyuser has the right Manage level

At least the Acct Def. should now be reassigned: XIsInEffect@PersonHasTSBAccountDef = 1