Optional[customOptional[unknownif a tenant user account is created during invitation it gets a reference to the invitation resource once invitation is accepted it looses this reference (and internally gets a reference to their global federated user account)
user account state can help distinguish case when account is blocked globally
currently can only accept the values: custom, unknown, google, github.