add ProcessExecution rule for suspendUser