---
title: Revoke all Access tokens for a user
---

[Skip to content](#_top)

[API Reference](https://developers.cloudflare.com/api/python)

[Zero Trust](https://developers.cloudflare.com/api/python/resources/zero_trust)

[Organizations](https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/organizations)

Copy Markdown

Open in **Claude**Open in **ChatGPT**Open in **Cursor**

---

**Copy Markdown****View as Markdown**

# Revoke all Access tokens for a user

zero\_trust.organizations.revoke\_users(OrganizationRevokeUsersParams\*\*kwargs) -> [OrganizationRevokeUsersResponse](<https://developers.cloudflare.com/api/python/resources/zero_trust#(resource)%20zero_trust.organizations%20%3E%20(model)%20organization_revoke_users_response%20%3E%20(schema)>)

POST/{accounts\_or\_zones}/{account\_or\_zone\_id}/access/organizations/revoke\_user

Revokes a user’s access across all applications.

##### Security

<details>

<summary>API Token</summary>



The preferred authorization scheme for interacting with the Cloudflare API. <a href="https://developers.cloudflare.com/fundamentals/api/get-started/create-token/">Create a token</a>.

**Example:**<code>Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY</code>

</details>

<details>

<summary>API Email + API Key</summary>



The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.

**Example:**<code>X-Auth-Email: user@example.com</code>

The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.

**Example:**<code>X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194</code>

</details>

##### Accepted Permissions (at least one required)

`Access: Organizations, Identity Providers, and Groups Write`

##### ParametersExpand Collapse

email: str

The email of the user to revoke.

[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20email%20%3E%20(schema)>)

account\_id: Optional\[str]

The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.

[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>)

zone\_id: Optional\[str]

The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)

devices: Optional\[[bool](<https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/organizations/methods/revoke_users#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20devices%20%3E%20(schema)>)]

When set to `true`, all devices associated with the user will be revoked.

[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20devices%20%3E%20(schema)>)

devices: Optional\[[bool](<https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/organizations/methods/revoke_users#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20devices%20%3E%20(schema)>)]

When set to `true`, all devices associated with the user will be revoked.

[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20devices%20%3E%20(schema)>)

user\_uid: Optional\[str]

The uuid of the user to revoke.

[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20user_uid%20%3E%20(schema)>)

warp\_session\_reauth: Optional\[[bool](<https://developers.cloudflare.com/api/python/resources/zero_trust/subresources/organizations/methods/revoke_users#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20warp_session_reauth%20%3E%20(schema)>)]

When set to `true`, the user will be required to re-authenticate to WARP for all Gateway policies that enforce a WARP client session duration. When `false`, the user’s WARP session will remain active

[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(method)%20revoke_users%20%3E%20(params)%20default%20%3E%20(param)%20warp_session_reauth%20%3E%20(schema)>)

##### ReturnsExpand Collapse

<details>

<summary>

Literal\[true, false]

</summary>

One of the following:

true

<a href="#(resource)%20zero_trust.organizations%20%3E%20(model)%20organization_revoke_users_response%20%3E%20(schema)%20%3E%20(member)%200">Link to this property</a>

false

<a href="#(resource)%20zero_trust.organizations%20%3E%20(model)%20organization_revoke_users_response%20%3E%20(schema)%20%3E%20(member)%201">Link to this property</a>

</details>

[Link to this property](<#(resource)%20zero_trust.organizations%20%3E%20(model)%20organization_revoke_users_response%20%3E%20(schema)>)

### Revoke all Access tokens for a user

Python

HTTPTypeScriptPythonGoTerraform

```
import os
from cloudflare import Cloudflare

client = Cloudflare(
    api_token=os.environ.get("CLOUDFLARE_API_TOKEN"),  # This is the default and can be omitted
)
response = client.zero_trust.organizations.revoke_users(
    email="test@example.com",
    account_id="account_id",
)
print(response)
```

200 example

```
{
  "result": true,
  "success": true
}
```

##### Returns Examples

200 example

```
{
  "result": true,
  "success": true
}
```