Enabling and Disabling Key Manager Accounts
By default, all newly created accounts are enabled. Key Manager accounts that should no longer be used can be disabled to prevent possible misuse.
To disable local Key Manager accounts, navigate to the Accounts→Accounts page and perform a Disable action on the target account. Disabled accounts cannot be used for accessing the Key Manager management interfaces, nor for performing management operations. You can later perform an Enable action to restore the original functionality of any disabled accounts.
Note that directory-based accounts are managed by the directory instead of Key Manager: to prevent a directory user from logging in, you must disable their account from the directory. Directory accounts will be automatically activated from disabled status when the account is successfully authorized with directory login.