We'd like to be able to delete an account if the account doesn't have any entitlements. The account access rule appears to only allow you to disable the account. If our requirement is to delete instead of disable, what choices do we have related to automating this via a change request?
It appears previous posters have had similar questions, without a clear solution for deleting the account:
Account To Be Deactivated When All Responsibilities
Delete accounts automatically
Currently I'm thinking we'd need either a custom task or a sub-process within our workflow (when using a form/access review to remove entitlements) that would check to see if the account has any associated entitlements left for said business application. If not, we'd then have to add a provisioning node to the workflow. The one thing I don't like about this is you don't see the delete account item within the change request itself.
Perhaps you can reuse the same method created by Clive Morrish in the Account Review - Revoke Account Options to submit those requests using web services.
Maybe something like a simple custom task, where all it does is select the accounts to be deleted into a Change Request XML then posting it via Web Services using a REST node back to IGL to create proper 'Delete Account' change requests.