A dormant account is an account that remains enabled but has not been used for a defined period. Dormancy may indicate an unnecessary account, an abandoned integration, extended leave or incomplete offboarding.
IGA should apply risk-based inactivity rules, confirm ownership and business need, and suspend or remove unjustified accounts. Some service accounts are legitimately infrequent and require context before action.