Disconnecting users
Disconnecting someone ends their open session without changing their account. It takes effect on their next action: their next request fails and they are redirected to the sign-in screen. They can then sign back in, unless they were also deactivated. These actions live under Administration → Users and require the same user-management permission as the page.
When to use it
- A departing employee — remove access right away, without waiting for the session to expire.
- A security concern — a lost device, a session left open, or suspected unauthorized access: you end sessions immediately.
Disconnect one person
- In Administration → Users, find the person’s row.
- Open the ⋯ menu on their row and choose Disconnect. The option is shown for active users only.
- Confirm in the dialog that appears.
The person is signed out on their next action. Because their account stays active, they can sign back in right away — that’s expected. To remove access for good, deactivate the account instead: deactivating also signs them out immediately (see below).
Disconnect all users
Next to Bulk Import, the Disconnect all users button ends every open session on the account in a single action. A confirmation dialog appears before it runs.
- Your own session is never ended. You stay signed in; only other people are disconnected.
- After it runs, a notification tells you how many people were disconnected.
As with disconnecting a single person, accounts aren’t changed: everyone can sign back in, unless they were deactivated.
Automatic disconnect
Disconnecting also happens on its own in two cases:
- When you deactivate an account — when you Deactivate a user from their row menu, they are also disconnected immediately. A deactivated user can no longer stay connected until their session expires.
- On a Replace-mode bulk import — the accounts the import deactivates (those missing from the file) are disconnected immediately, just like a manual deactivation.
What the disconnected person sees
Disconnecting doesn’t throw them off the screen the very instant you do it. It takes effect on their next action: their next request fails and the app redirects them to the sign-in screen. They can then sign back in as usual — unless their account was also deactivated, in which case sign-in is refused until it’s reactivated.
See also
- Users — add, edit, activate and deactivate accounts.
- Security groups — what each user can see and do.