> ## Documentation Index
> Fetch the complete documentation index at: https://developer.vanta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Deactivate users

> Deactivate a list of users that were added to Vanta manually. Deactivated users can no longer sign in to Vanta.
Users provisioned by your identity provider, for example through SCIM, cannot be deactivated here; remove them through your identity provider instead.
The last active admin in the organization cannot be deactivated.
Each user is processed independently, so a user that cannot be deactivated does not stop the others in the request.



## OpenAPI

````yaml /reference/manage-vanta.json post /users/deactivate
openapi: 3.0.0
info:
  title: Manage Vanta
  version: 1.0.0
  description: >-
    The REST API lets customers query and mutate Vanta's data. Use this API to
    automate bulk actions, query data for custom workflows and dashboards, and
    bolster your security operations


    **Note for Vanta Gov (FedRAMP) customers:** Select `Vanta Gov (FedRAMP)`
    from the server dropdown to issue requests against
    `https://api.vanta-gov.com`. The OAuth token URL shown below defaults to the
    commercial host — replace it with `https://api.vanta-gov.com/oauth/token`.
  termsOfService: https://www.vanta.com/terms
  license:
    name: UNLICENSED
  contact:
    name: API Support
    url: https://help.vanta.com/
    email: support@vanta.com
servers:
  - url: https://api.vanta.com/v1
    description: Vanta (Commercial)
  - url: https://api.vanta-gov.com/v1
    description: Vanta Gov (FedRAMP)
security: []
paths:
  /users/deactivate:
    post:
      tags:
        - Users
      summary: Deactivate users
      description: >-
        Deactivate a list of users that were added to Vanta manually.
        Deactivated users can no longer sign in to Vanta.

        Users provisioned by your identity provider, for example through SCIM,
        cannot be deactivated here; remove them through your identity provider
        instead.

        The last active admin in the organization cannot be deactivated.

        Each user is processed independently, so a user that cannot be
        deactivated does not stop the others in the request.
      operationId: DeactivateUsers
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              properties:
                updates:
                  items:
                    properties:
                      id:
                        type: string
                        description: ID of the user to deactivate
                    required:
                      - id
                    type: object
                  type: array
                  description: List of the users to deactivate.
                  minItems: 1
                  maxItems: 100
              required:
                - updates
              type: object
      responses:
        '200':
          description: Ok
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BulkResponse'
              examples:
                Example 1:
                  value:
                    results:
                      - id: 69c55d93ca5e7c5217d4c993
                        status: SUCCESS
                      - id: OTHER_USER_ID
                        status: ERROR
                        message: Invalid Input
      security:
        - bearerAuth: []
components:
  schemas:
    BulkResponse:
      properties:
        results:
          items:
            $ref: '#/components/schemas/UpdateResponse'
          type: array
          description: List of results matching the length and order of the request
      required:
        - results
      type: object
      additionalProperties: false
    UpdateResponse:
      anyOf:
        - $ref: '#/components/schemas/SuccessResponse'
        - $ref: '#/components/schemas/NonSuccessResponse'
    SuccessResponse:
      title: SuccessResponse
      properties:
        id:
          type: string
          description: Id of the record
        status:
          $ref: '#/components/schemas/ResultLineStatus.SUCCESS'
          description: Status of the requested update
      required:
        - id
        - status
      type: object
      additionalProperties: false
    NonSuccessResponse:
      title: NonSuccessResponse
      properties:
        id:
          type: string
          description: Id of the record
        status:
          $ref: '#/components/schemas/Exclude_ResultLineStatus.SUCCESS_'
          description: Status of the requested update
        message:
          type: string
          description: Message an error message
      required:
        - id
        - status
        - message
      type: object
      additionalProperties: false
    ResultLineStatus.SUCCESS:
      enum:
        - SUCCESS
      type: string
    Exclude_ResultLineStatus.SUCCESS_:
      $ref: '#/components/schemas/ResultLineStatus.ERROR'
      description: Exclude from T those types that are assignable to U
    ResultLineStatus.ERROR:
      enum:
        - ERROR
      type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer

````

## Related topics

- [Deactivates a control](https://developer.vanta.com/api-reference/controls/deactivates-a-control.md)
- [Get user by ID](https://developer.vanta.com/api-reference/users/get-user-by-id.md)
- [Get vulnerability by ID](https://developer.vanta.com/api-reference/vulnerabilities/get-vulnerability-by-id.md)
- [List assignable users](https://developer.vanta.com/api-reference/customer-trust/list-assignable-users.md)
- [List active users](https://developer.vanta.com/api-reference/users/list-active-users.md)