Activate, deactivate, or delete users in bulk

Offboarding or freezing many accounts one row at a time is slow and easy to miss. The users table now supports multi-select, and the directory API can activate, deactivate, or delete a list of users in one call.

This is the longer note behind the February 28 changelog entry.

How it works

Console Users adds multi-select and bulk actions with a confirm dialog for deactivate and delete.

Directory API (tenant + environment scoped):

• POST …/users/bulk/set-active — body { userIds, active } to enable or disable many users
• POST …/users/bulk/delete — body { userIds } to delete many users

userIds must be a non-empty array. Deactivate sets active false without removing the directory row. Delete removes the users the API is allowed to delete.

A user that is active can sign in. A deactivated user is blocked from new sign-ins; the record and history remain until you delete.

Set it up

In the console, open Users:

1. Select more than one row.
2. Choose activate, deactivate, or delete.
3. Confirm the dialog. Wait for the action to finish before changing the same selection.

API clients send the same userIds list. Scope the token to that environment.

Trust boundaries

Bulk delete is irreversible from the console action. Prefer deactivate when you may need the record. These operations require directory write access; they are not available to end users.

A bulk status change does not by itself revoke every refresh token in every client. Confirm session policy if the account was compromised.

Try it

Deactivate two test users, confirm they cannot sign in, then reactivate. User lifecycle is in Users and User management. The original release note is in the changelog.