Is it possible to delegate account lock and disable while preserving other account properties.