Revoke an admin's access
This guide shows you how to remove an admin’s access to your organization — for example, when someone leaves, changes roles, or their account may be compromised.
Who can do this: Admins who have permission to revoke admin access. Org owners can do this by default.
Before you start
Section titled “Before you start”- You cannot revoke the last org owner. Promote another admin to org owner first, then revoke the departing account.
- Undoing a revocation isn’t built yet: the Undo button is shown but disabled. To restore access, invite the person again.
- Active sessions end within about 60 seconds of revocation.
- Go to Admins (at
/admin/admin-security/admins). - Click the name of the admin you want to revoke.
- Open the ⋮ menu on their detail page.
- Click Revoke access.
- In the confirmation dialog, open the Reason dropdown and select the reason that best fits:
- Departed staff
- Suspected compromise
- Role change
- Inactive
- Other
- Click Revoke access to confirm.
The admin’s account status changes to “Revoked” and their sessions end within 60 seconds.
Undo a revocation (not built yet)
Section titled “Undo a revocation (not built yet)”Undoing a revocation isn’t built yet. The success message and the admin’s row show an Undo button, but it is disabled — the undo panel it points to isn’t built either. To restore access, invite the person again from the Admins list.
Verify
Section titled “Verify”You’ll know it worked when the admin’s row shows a Revoked status badge and you see the “Access revoked.” success message.
If something goes wrong
Section titled “If something goes wrong”- “Can’t revoke the last Org Owner — promote another admin first” — Your organization must always have at least one org owner. Go to Admins (at
/admin/admin-security/admins), promote another admin to the org owner role, then return to revoke this account. - You revoked the wrong admin — Undo isn’t built yet, so a revocation can’t be reversed. To restore access, invite the person again from the Admins list.
- Sessions are still active after a few minutes — The revoked admin may still look signed in, but MapleGather checks their admin status on every request and refuses everything they try from their next page load or action. A page they already had open can stay on screen; nothing on it works.