Request the deletion of a user's account (admin only)
POST/users/:id/account-deletion
Locks the account at once: from the commit the user cannot sign in, and their sessions and writes are refused. An account.delete.v1 job then deletes the account's data. The email confirms the target and must be the account's address, compared after normalization. Administrators are refused; banned users are accepted. The audit event records the signed-in administrator as the actor, with the reason.
Request
Responses
- 202
- 400
- 401
- 403
- 404
- 409
- 503
the account is locked and its deletion is queued
invalid request. An email that does not match the account returns {"error":"confirmation_mismatch"}; other invalid input, such as a missing email or reason, has an empty body.
unauthorized
forbidden (not admin)
user not found or already deleted
the target is an administrator (admin_account) or its deletion is already filed (account_deletion_in_progress)
authorization unavailable