As an organization administrator I would like to have the ability to automatically deactivate Atlassian Accounts that had no activity for X amount of time (customizable based on need). This can be an option at the organization level.

For managed accounts that are not synced the deactivation should be automatic, alternatively for synced accounts (accounts managed by an Identity Provider) we should have the ability to filter these inactive accounts (either by an UI view or .csv report) so that the accounts can be removed from the application granting access from the Identity Provider itself.

While the Get users in an organisation endpoint returns the last_active attribute from users, org admins prefer a built-in mechanism to achieve this in the admin.atlassian.com UI.