In Azure Active directory you can block an account without deleting it. We capture this setting for all users in your tenant and track the day it was last changed. This allows us to segment users who may be licensed but have their accounts blocked and thus cannot access any content in M365.
