Render an account or a role inactive as shown here.
You must bind as the Directory Manager.
You cannot use DSCC to perform this task. Use the command line, as described in this procedure.
Use the dsutil account-inactivate command to render the account or role inactive.
The following command renders Barbara Jensen's account inactive:
$ dsutil account-inactivate -p port-number -w pwd.txt \ uid=bjensen,ou=people,dc=example,dc=com uid=bjensen,ou=people,dc=example,dc=com inactivated. $
See the dsutil(1M) man page for details.