AccountSyncOnTerminatedMatchAction
What a rule does when it matches exactly one terminated identity. Absent means review.
enum AccountSyncOnTerminatedMatchAction {
create
reactivate
review
}
Values
AccountSyncOnTerminatedMatchAction.create
Drop terminated holders from this rule's hits, so a later rule or the job's no-match action applies.
AccountSyncOnTerminatedMatchAction.reactivate
Link and update the leaver, moving their lifecycle off TERMINATED. Sign-in stays untouched.
AccountSyncOnTerminatedMatchAction.review
Park the account for review. The safe default.