Given soon you will be able to affect changes using CX cloud - it is important that user accounts are forced to validate via e-mail on certain interval to ensure the user is still with the organization. This is due to the fact that CCO account re often active long after staff departs. I would also deactivate any account which has not logged in for X period forcing e-mail validation to re-enable account
