Help / Tutorials

Administrators About 5 minutes

#Turn off someone's access and prove it worked

You'll need: entitlements.manage (or to own the app), and audit.view.

1. Users → find the person → Access.
2. Flip off the switch next to the app. Choose a reason (for example "billing dispute") and confirm. The badge changes to Turned off.
3. Tap the app row → Why? The access check now resolves to Turned off, and effective_permissions is empty. This is the same live answer every app gets from Substratal.
4. Any session the person had open in that app ends now, because every app is required to act on the access.revoked webhook.
5. Audit Log → the newest entitlement.disabled event shows you as the actor, the status before (active) and after (disabled), and the reason.

Undo: flip the switch back on. Their roles, profile and settings were never touched, so they come back exactly as they were.

Screens in this tutorial

USR-03 · User — Overview ACX-01 · User — Access ACX-03 · Turn off / edit access ACX-04 · Access check (Why?) AUD-01 · Audit log AUD-02 · Audit event

Last updated 2026-10-23 · Built 2026-10-25 from a9ef3be · API 1.0.0-draft.13 · Substratal-Version: 1