9.5. Enabling and Disabling User Accounts

download PDF
User accounts can be deactivated or disabled. A disabled user cannot log into IdM or its related services (like Kerberos) and he cannot perform any tasks. However, the user account still exists within Identity Management and all of the associated information remains unchanged.


Any existing connections remain valid until the Kerberos TGT and other tickets expire. Once the ticket expires, the user cannot renew the ticket.

9.5.1. From the Web UI

Multiple users can be disabled from the full users list by selecting the checkboxes by the desired users and then clicking the Disable link at the top of the list.
Disable/Enable Options at the Top of the Users List

Figure 9.2. Disable/Enable Options at the Top of the Users List

A user account can also be disabled from the user's individual entry page.
  1. Open the Identity tab, and select the Users subtab.
  2. Click the name of the user to deactivate or activate.
  3. In the actions drop-down menu, select the Disable item.
  4. Click the Accept button.
When a user account is disabled, it is signified by a minus (-) icon for the user status in the user list and by the username on the entry page. Additionally, the text for the user is gray (to show it is inactive) instead of black.
Disable Icon for User Status

Figure 9.3. Disable Icon for User Status

9.5.2. From the Command Line

Users are enabled and disabled using user-enable and user-disable commands. All that is required is the user login. For example:
[bjensen@server ~]$ ipa user-disable jsmith
Red Hat logoGithubRedditYoutubeTwitter


Try, buy, & sell


About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

© 2024 Red Hat, Inc.