As a sys admin, I want the SOPs I follow to be correct when disabling a registered user's account

[StephenCoady]

The work carried out in this issue needs to be reflected in our SOPs here and here.

Pre-requisites:
We need to know what this solution will be called once in production.
This work will more than likely coincide with the creation of the ansible playbook for deployment.

Acceptance criteria:
Both SOPs linked above are correct for the new AAA solution.

Definition of Done:
Any PRs relating to the above have been reviewed and merged by a member of the sys admin team who will be following the SOP.