Dormant Account
A Dormant Account is an account that still exists but shows no activity for a prolonged period and may no longer be needed.
Definition
A Dormant Account is an account that remains technically active or available in a system but has not been used for a defined period of time. Dormancy can affect workforce accounts, privileged accounts, break-glass accounts, service accounts, or partner identities. Dormant accounts are not necessarily orphaned, but they often indicate poor lifecycle hygiene, overprovisioning, or access that should be reviewed and removed. In many organizations, dormant account management involves inactivity thresholds, exception rules, owner attestation, suspension policies, and eventual deprovisioning.
Why it matters
Dormant accounts increase attack surface because they may remain exploitable even though they are no longer operationally required.
The Ariovis perspective
Ariovis promotes automation that remains explainable and recoverable: explicit rules, approvals where needed, logs, error handling and recovery mechanisms.
Related services
Common pitfalls
- A common pitfall is treating inactivity as harmless and leaving unused accounts enabled indefinitely without review.
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.