💡The configuration example below applies to Active Directory Sync setup only.
🧭 In this guide:
- Why exclude users on leave from offboarding
- How to update the Active expression
- Customer example
-
Example for your company
Why exclude users on leave from offboarding
By default, users are automatically offboarded when their AD account is marked as soft deleted.
However, this may also include users who are temporarily away from work (for example, on parental leave), even if they are expected to return.
To prevent these users from being offboarded, and leave the devices assigned to them as unassigned, you can update your Active expression to exclude them based on a specific AD attribute.
How to update the Active expression
To exclude users on leave, modify the existing Active expression in AD from:
Switch([IsSoftDeleted], , "False", "true", "True", "false")
to:
Switch([IsSoftDeleted], , "False", "true", "True", IIF([nameOfTheTemporaryLeaveAttribute] = "valueOfTheTemporaryLeaveAttribute", "true", "false"))
This update ensures that users with a specific attribute (e.g., “On Leave Without Access”) are recognized as active and are not offboarded.
Customer example
Customer X uses the attribute extensionAttribute14 with the value "On Leave Without Access".
Their expression looks like this:
Switch([IsSoftDeleted], , "False", "true", "True", IIF([extensionAttribute14] = "On Leave Without Access", "true", "false"))
Example for your company
If your organization uses a different AD attribute or value to identify users on leave, simply replace the attribute name and value in the expression:
Switch([IsSoftDeleted], , "False", "true", "True", IIF([nameOfTheTemporaryLeaveAttribute] = "valueOfTheTemporaryLeaveAttribute", "true", "false"))
✅ Tip:
Document your chosen attribute name and value internally, so your IT or HR teams can easily maintain and update the configuration in the future.