Hi Ronald,
I do not know the best practise but I usually don't prefer reading/writing/managing non-dialog users in/using IDM.
I do this by using filters in read pass when I initially load the users from SAP systems. You can mention filter like below, to read only dialog users in your update job.
Kind regards,
Jai
