Add active workspace users to viewer group before audits

Your user directory can contain suspended, archived, or offboarded accounts, causing audit gaps and incorrect access. It keeps only active employees in the viewer group so auditors see clean membership before the next compliance review.