- Disallow suspended accounts from revoking sessions and apps - Allow suspended accounts to access exports