When users leave an organization, we should be able to deactivate them from logging in, but keep them in the system for historical purposes