Stale & Orphaned Accounts

This is the help text the console shows in the help panel on this page.

This report identifies active accounts that are either dormant (no recent activity) or orphaned (no matching employee in your directory, or an employee who has been terminated). Both represent security risks — dormant accounts can be hijacked undetected, and orphaned accounts may belong to former employees or contractors.

Key Metrics

• Total Stale/Orphaned: Active accounts that are dormant, orphaned, or both.
• Dormant Accounts: Active accounts with no recorded usage in 30+ days.
• Orphaned (No HR Match): Accounts with no matching active employee in the directory.
• Avg Dormant Days: How long dormant accounts have been inactive on average.

HR Match Status

The HR Match column shows whether the account owner was found in the employee directory. No Match indicates an orphaned account requiring immediate investigation. The Dormant Days column is color-coded: blue (under 90 days), amber (90–179), red (180 or more).

Remediation

1. For dormant accounts: contact the account owner to confirm the account is still needed.
2. For orphaned accounts: investigate whether the account belongs to a contractor or former employee, then revoke if unneeded.
3. Document your decision for audit trail purposes.