Within the Google Devices integration app, we have the following params set:

It looks to me that IIQ is assigning No Access users as device owners since it is able to match a username. I’m seeing users that have withdrawn as students being assigned devices...some where the last login date is the previous school year.
If this is the default config, I suppose a rule is necessary to remove owners when the owner’s role is “No Access” ??