Skip to main content


This Script is part of the Common Scripts Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

This script allows disabling a specified user using one or more of the following integrations: SailPointIdentityIQ, ActiveDirectoryQuery, Okta, MicrosoftGraphUser, and IAM.

Script Data#

Script Typepython3
Cortex XSOAR Version6.0.0


Argument NameDescription
usernameThe username of the user to disable.
approve_actionWhether to run the command. This is used to prevent unwanted calls to the command.


IdentityIQ.AccountDisable.activeIndicates the status of account (should be false after request is successfully completed).Boolean
IAM.UserProfileThe user profile.Unknown
IAM.Vendor.activeGives the active status of user. Can be true or false.Boolean
IAM.Vendor.brandThe integration name.String
IAM.Vendor.detailsTells the user if the API was successful, otherwise provides error information.Unknown
IAM.Vendor.emailThe employee email address.String
IAM.Vendor.errorCodeThe HTTP error response code.Number
IAM.Vendor.errorMessageThe reason the API failed.String
IAM.Vendor.idThe employee user ID in the app.String
IAM.Vendor.instanceNameThe integration instance name.Unknown
IAM.Vendor.successIf true, the command was executed successfully.Boolean
IAM.Vendor.usernameThe employee username in the app.String
IAM.Vendor.actionThe command name.String