What occurs when a user's lifecycle changes to inactive regarding Entitlement A?

• A. The user retains all previous entitlements.
• B. All access is removed and accounts are disabled.
• C. Only specific entitlements are revoked.
• D. The user is notified about the changes.

Answer: (B)

When a user's lifecycle changes to inactive, particularly regarding Entitlement A, it typically represents a significant change in the user's status within the organization's identity management system. This change to inactive status usually signifies that the user no longer needs access to corporate resources, applications, or data.

In the context of identity security, best practices dictate that when an account is marked as inactive, all access privileges associated with that account should be removed to mitigate any potential security risks. Removing access ensures that inactive users cannot access sensitive information or systems, which might otherwise leave the organization vulnerable to unauthorized access or data breaches. This proactive approach is important for maintaining the integrity and security of organizational resources.

While it's true that there may be cases where specific entitlements could be retained or where notification might occur, the standard response to a user transitioning to inactive status typically involves fully deactivating their accounts and revoking all entitlements. Thus, the correct answer reflects the most common practice of safeguarding the organization's assets by ensuring that all access is removed when a user's status is changed to inactive.