Error correction for data control ledgers

A data control method, comprising:

• receiving account status information from a provisioning service device, wherein:
• the provisioning service device is configured to modify a user account;
• the provisioning service device is associated with a group within an enterprise;
• and
• the account status information comprises:
• an account identifier for the user account;
• and
• a first current status for the user account;
• querying a status log using the account identifier to determine a second current status of the user account, wherein the status log is configured to store current status information for user accounts, wherein the current status information comprises a plurality of account identifiers that are each linked to a current status for a user account;
• comparing the first current status for the user account from the provisioning service device to the second current status of the user account in the status log;
• determining the first current status for the user account from the provisioning service device does not match the second current status of the user account in the status log based on the comparison;
• and
• updating one of the status log and the provisioning service device in response to determining that the first current status for the user account from the provisioning service device does not match the second current status of the user account in the status log.

A computer program comprising executable instructions stored in a non-transitory computer readable medium that when executed by a processor causes the processor to:

• receive account status information from a provisioning service device, wherein:
• the provisioning service device is configured to modify a user account;
• the provisioning service device is associated with a group within an enterprise;
• and
• the account status information comprises:
• an account identifier for the user account;
• and
• a first current status for the user account;
• query a status log using the account identifier to determine a second current status of the user account, wherein the status log is configured to store current status information for user accounts, wherein the current status information comprises a plurality of account identifiers that are each linked to a current status for a user account;
• compare the first current status for the user account from the provisioning service device to the second current status of the user account in the status log;
• determine the first current status for the user account from the provisioning service device does not match the second current status of the user account in the status log based on the comparison;
• and
• update one of the status log and the provisioning service device in response to determining that the first current status for the user account from the provisioning service device does not match the second current status of the user account in the status log.