We came across a situation where a worker was terminated and the user account was disabled which was our standard and recommended practice by the partner. However, after digging deeper into workflows and approvals, we noticed that a user was still in an approval role. After modifying the user group and putting in a new user, the finance and audit group thought it seemed strange that User Groups would allow you to pick a user for approval that was marked as 'disabled'. Their thinking is that if you select a disabled user, a warning message should pop up and tell you this is not allowed or something like that.
What is considered best practice to prevent picking a user who is disabled? An initial suggestion given was to label in their name 'John Doe (terminated)'. That was not sufficient because it could still be picked from the list.
If I delete the user, of course, it removes it but company policy is not to delete.
Keep in mind the AD account is disabled so no log in or email for workflow approval is ever accessed.