...
| Preference | Status | Description | Provisioning |
|---|---|---|---|
| n/a | Locked | Person is locked | Person data and All Members Groups provisioned |
| 1 | Active | Person or Role is an active member in the CO | Person, Role, and Group data provisioned |
| 2 | GracePeriod | Primary association with the CO has ended, but services have not yet been deprovisioned | Person, Role, and Group data provisioned |
| 3 | Suspended | Association with the CO has been (manually) temporarily suspended | Person data and All Members Groups provisioned |
| 4 | Expired | Valid through date has been reached | Person data and All Members Groups provisioned |
| 5 | Approved | No data provisioned | |
| 6 | PendingApproval | The enrollment flow petition is pending approval | No data provisioned |
| 7 | Confirmed | No data provisioned | |
| 8 | PendingConfirmation | An invitation or email confirmation was sent via an enrollment flow | No data provisioned |
| 9 | Invited | An invitation was sent via default enrollment | No data provisioned |
| 10 | Pending | No data provisioned | |
| 11 | Denied | The enrollment flow petition was denied | No data provisioned |
| 12 | Declined | The invitation sent via default enrollment was declined | No data provisioned |
| 13 | Deleted | No data provisioned | |
| 14 | Duplicate | The record is a duplicate of another | No data provisioned |
| Note |
|---|
"No data provisioned" means that the provisioners will not be invoked. Ordinarily, this is not a problem since the non-provisioned statuses are normally used only during enrollment (ie: before any provisioning takes place). Downgrading to a non-provisioned status will not deprovision records, since ordinarily provisioned records should not be downgraded to a non-provisioned status, except perhaps for Duplicate, which typically implies some manual cleanup is required. To deprovision records, either first set the status to Suspended, Expired, or Locked, or manually deprovision the records after adjusting the status. |