> ## Documentation Index
> Fetch the complete documentation index at: https://docs.idemeum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Demote / disable / delete user

> Remove permissions from admin users or completely delete user records from idemeum cloud.

## Demote user

To `demote` a user means to remove full admin rights or remove delegation to customer tenants (MSP setup). We do not support `demote` operation, so please proceed with disabling user instead.

## Disable user

To `disable` a user means to temporarily block access to all resources. User access will be revoked, but the user record will still be kept in the cloud, so that you can re-enable it back or delete it later.

* Access you idemeum admin portal (or MSP parent tenant in case of MSP setup)
* Navigate to `Users` → `User management`
* Select the user you want to disable → click on `...` and choose `Disable`

The user will transition into a `disabled` state, all access will be blocked.

<Note>
  If you want to demote the user simply `disable` and then `enable` the user back. This way admin rights or delegated tenant access will be revoked. Once the user is re-enabled, she needs to login to the portal so that you can then promote back to admin or restore certain delegated access.
</Note>

## Delete user

To `delete` a user means to cut all access and permanently remove the record from the cloud. You first need to `disable` the user and then `delete`.

* Access you idemeum admin portal (or MSP parent tenant in case of MSP setup)
* Navigate to `Users` → `User management`
* Click on `...` and then choose `Disable user`
* Click on `...` and choose `Delete user` to permanently remove the user record