Change a person's role or suspend them

When someone changes jobs or leaves your organization, change their role or suspend the account. Suspending is the right way to cut access: sessions end and nothing is deleted.

How do I change the role or status?

1. Under «Manage» › «Users», choose «Edit» on the person's row. «Change access» opens.
2. Change the «Role» («Member» or «Administrator») and the status («Active» or «Suspended»).
3. In «Confirmation», type the email or short ID shown.
4. Choose «Apply access change».

What happens?

• «Suspending revokes all of that user's sessions.»
• «Demoting removes administrative access.»
• «The last active administrative account cannot be suspended or demoted.» The error message is «The organization must keep at least one active administrator.»
• Re-enabling a person needs a free seat in the licence.

I only want to end their sessions

In the same dialog, choose «Revoke all sessions». The person keeps the account and factors but must sign in again.

Leaver checklist

1. Suspend the account (ends every session, single sign-on included).
2. Remove or disable the account in each application this service does not manage: sessions the applications already opened continue until they end them.
3. If you use SCIM, disable the person in the identity provider: SCIM suspends them here automatically.
4. If your organization erases suspended accounts automatically, the account is erased after the set period. See Retention of suspended accounts.

Other actions on the person's row