Refactor AccountComponent to use OrganizationService to check for man…

…aging organization

apps/web/src/app/auth/settings/account/account.component.ts

@@ -2,7 +2,7 @@ import { Component, OnInit, ViewChild, ViewContainerRef } from "@angular/core";
 import { lastValueFrom, map, Observable, of, switchMap } from "rxjs";
 
 import { ModalService } from "@bitwarden/angular/services/modal.service";
-import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
+import { OrganizationService } from "@bitwarden/common/admin-console/abstractions/organization/organization.service.abstraction";
 import { UserVerificationService } from "@bitwarden/common/auth/abstractions/user-verification/user-verification.service.abstraction";
 import { FeatureFlag } from "@bitwarden/common/enums/feature-flag.enum";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
@@ -28,8 +28,8 @@ export class AccountComponent implements OnInit {
     private modalService: ModalService,
     private dialogService: DialogService,
     private userVerificationService: UserVerificationService,
-    private accountService: AccountService,
     private configService: ConfigService,
+    private organizationService: OrganizationService,
   ) {}
 
   async ngOnInit() {
@@ -39,8 +39,8 @@ export class AccountComponent implements OnInit {
       .pipe(
         switchMap((isAccountDeprovisioningEnabled) =>
           isAccountDeprovisioningEnabled
-            ? this.accountService.activeAccount$.pipe(
-                map((account) => account?.managedByOrganizationId === null),
+            ? this.organizationService.organizations$.pipe(
+                map((organizations) => !organizations.some((o) => o.managesActiveUser === true)),
               )
             : of(true),
         ),

libs/common/src/admin-console/models/data/organization.data.ts

@@ -54,6 +54,7 @@ export class OrganizationData {
   accessSecretsManager: boolean;
   limitCollectionCreationDeletion: boolean;
   allowAdminAccessToAllCollectionItems: boolean;
+  managesActiveUser?: boolean | null;
 
   constructor(
     response?: ProfileOrganizationResponse,
@@ -112,6 +113,7 @@ export class OrganizationData {
     this.accessSecretsManager = response.accessSecretsManager;
     this.limitCollectionCreationDeletion = response.limitCollectionCreationDeletion;
     this.allowAdminAccessToAllCollectionItems = response.allowAdminAccessToAllCollectionItems;
+    this.managesActiveUser = response.managesActiveUser;
 
     this.isMember = options.isMember;
     this.isProviderUser = options.isProviderUser;

libs/common/src/admin-console/models/domain/organization.ts

@@ -73,6 +73,12 @@ export class Organization {
    * Refers to the ability for an owner/admin to access all collection items, regardless of assigned collections
    */
   allowAdminAccessToAllCollectionItems: boolean;
+  /**
+   * Indicates if this organization manages the active user.
+   * A user is considered managed by an organization if their email domain
+   * matches one of the verified domains of that organization, and the user is a member of it.
+   */
+  managesActiveUser?: boolean | null;
 
   constructor(obj?: OrganizationData) {
     if (obj == null) {
@@ -127,6 +133,7 @@ export class Organization {
     this.accessSecretsManager = obj.accessSecretsManager;
     this.limitCollectionCreationDeletion = obj.limitCollectionCreationDeletion;
     this.allowAdminAccessToAllCollectionItems = obj.allowAdminAccessToAllCollectionItems;
+    this.managesActiveUser = obj.managesActiveUser;
   }
 
   get canAccess() {

libs/common/src/admin-console/models/response/profile-organization.response.ts

@@ -51,6 +51,7 @@ export class ProfileOrganizationResponse extends BaseResponse {
   accessSecretsManager: boolean;
   limitCollectionCreationDeletion: boolean;
   allowAdminAccessToAllCollectionItems: boolean;
+  managesActiveUser?: boolean | null;
 
   constructor(response: any) {
     super(response);
@@ -115,5 +116,6 @@ export class ProfileOrganizationResponse extends BaseResponse {
     this.allowAdminAccessToAllCollectionItems = this.getResponseProperty(
       "AllowAdminAccessToAllCollectionItems",
     );
+    this.managesActiveUser = this.getResponseProperty("ManagesActiveUser") ?? null;
   }
 }