Contoso uses entitlement management to give external partners access to a SharePoint site through an access package. Security requires that when an external user's last access package assignment expires and they have no other assignments, their guest account is automatically blocked and eventually removed from the directory. You need to configure this behavior with the least administrative effort. What should you configure?