Can you define "Inactive User" as used in PCI DSS requirement 8.5.5?
An inactive user is one whose account has not been used in over 90 days. Note that section 8.5 requirements only apply to “non-consumer users” or those individuals that access systems within the cardholder environment, including but not limited to employees, contractors, administrators, and other third parties.