When inspecting an API key on the Rally Application Manager page, it is observed that the "Last Accessed" date field is updated for API keys that belong to a disabled user.
Release : SAAS
The "Last Accessed" date is updated when any application attempts to utilize the API key regardless of account status. The request is denied due to the account being disabled, however the date is still updated. This allows the customer to still see if there are any external applications or integrations that are attempting to use the API key and if there is an integration that may need to be updated to maintain operations.
There is no action necessary in this situation.
If the API key is no longer needed, then the best practice is to delete the API key.