Lifecycle stages
Create
Provision users with mapped attributes, directory constraints, and initial group controls.
Change
Preview role and group membership changes before applying Linux-impacting access.
Disable
Represent deprovisioning as enforceable active-state change and recoverable evidence.
Reconcile
Compare IdP, SCIM, and directory state after the transition completes.
Next action
Use the Users API and trust model to review lifecycle evidence expectations.