RACF performs no cleanup actions when deleting a user. This could result in security exposures if a new user is created with the same name. The preconfigured Subscriber Event policy converts a delete command for a User object into a modify command that sets the Login Disabled attribute. The Subscriber channel processes this as a RACF ALTUSER command to revoke the user's access to the system.