What Provisioning User attributes propagate to accounts even without any assigned Provisioning Roles/Templates?
All Identity Manager
The Password (eTPassword) and Status (eTSuspended) attribute values will be propagated from the Provisioning Global User to any associated endpoint accounts even if there are no Provisioning Roles/Templates assigned.
Each acquired endpoint does have settings to allow for disabling of the Password propagation to that endpoint and/or for disabling of the Status propagation to that endpoint as mentioned in the product doc: