--- title: Revoke all Access tokens for a user --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Zero Trust](https://developers.cloudflare.com/api/go/resources/zero_trust) [Organizations](https://developers.cloudflare.com/api/go/resources/zero_trust/subresources/organizations) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Revoke all Access tokens for a user client.ZeroTrust.Organizations.RevokeUsers(ctx, params) (\*[OrganizationRevokeUsersResponse](), error) POST/{accounts\_or\_zones}/{account\_or\_zone\_id}/access/organizations/revoke\_user Revokes a user’s access across all applications. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `Access: Organizations, Identity Providers, and Groups Write` ##### ParametersExpand Collapse
params OrganizationRevokeUsersParams Email param.Field\[string] Body param: The email of the user to revoke. Link to this property AccountID param.Field\[string]Optional Path param: The Account ID to use for this endpoint. Mutually exclusive with the Zone ID. Link to this property ZoneID param.Field\[string]Optional Path param: The Zone ID to use for this endpoint. Mutually exclusive with the Account ID. Link to this property QueryDevices param.Field\[bool]Optional Query param: When set to true, all devices associated with the user will be revoked. Link to this property QueryDevices param.Field\[bool]Optional Query param: When set to true, all devices associated with the user will be revoked. Link to this property UserUID param.Field\[string]Optional Body param: The uuid of the user to revoke. Link to this property WARPSessionReauth param.Field\[bool]Optional Body param: When set to true, the user will be required to re-authenticate to WARP for all Gateway policies that enforce a WARP client session duration. When false, the user’s WARP session will remain active Link to this property
[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type OrganizationRevokeUsersResponse bool One of the following: const OrganizationRevokeUsersResponseTrue OrganizationRevokeUsersResponse = true Link to this property const OrganizationRevokeUsersResponseFalse OrganizationRevokeUsersResponse = false Link to this property
[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(model)%20OrganizationRevokeUsersResponse%20%3E%20(schema)>) ### Revoke all Access tokens for a user Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/option" "github.com/cloudflare/cloudflare-go/zero_trust" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) response, err := client.ZeroTrust.Organizations.RevokeUsers(context.TODO(), zero_trust.OrganizationRevokeUsersParams{ Email: cloudflare.F("test@example.com"), }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", response) } ``` 200 example ``` { "result": true, "success": true } ``` ##### Returns Examples 200 example ``` { "result": true, "success": true } ```