Fabrikam Dental Group

Every member and guest account. Accounts that report to someone whose sign-in is blocked are flagged: the manager has usually left, so approvals and HR records go nowhere.

Everyone who is someone's manager, with the accounts that report to them. A manager whose sign-in is blocked still has people reporting to them: update the manager in Entra ID (or on-premises AD, for synced accounts).

Member accounts by department, as set on each account. Guests are left out.