We've realized recently that user accounts were not being suspended when people off-boarded. When asked why not the answer was we still wanted to allow incoming emails to be forwarded to others who had taken over the role.
The problem with this method is all they did was change the password which still left the account open to recovery by a former user based on Phone/Email. The one option is to of course remove the recovery email/phone and then change the password.
This still seems quite clunky to me vs out right suspending the user. Is there a way to effectively suspend the user/prevent Login while still allowing emails to flow?