Lifecycle stages

Joiner

Create

Provision users with mapped attributes, directory constraints, and initial group controls.

Mover

Change

Preview role and group membership changes before applying Linux-impacting access.

Leaver

Disable

Represent deprovisioning as enforceable active-state change and recoverable evidence.

Review

Reconcile

Compare IdP, SCIM, and directory state after the transition completes.

Next action

Use the Users API and trust model to review lifecycle evidence expectations.