zitadel_offboard_user
Offboard a Zitadel user by removing project role assignments, revoking org-manager grants, and deactivating the account. Includes safeguards against removing the last admin or owner.
Instructions
Offboard a user: remove their Admin|Standard project role assignment, revoke any org-manager grant, and deactivate the account. Guards: cannot remove the last Admin, cannot self-demote (pass actingUserId), cannot remove the last ORG_OWNER. Requires confirm: true.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| No | Email of the user to offboard (used if userId omitted) | ||
| userId | No | The Zitadel user ID to offboard (or provide email) | |
| confirm | No | Must be true to execute. Omit to preview the action. | |
| projectId | No | Project ID (uses default project if omitted) | |
| deactivate | No | Deactivate the account (default: true) | |
| actingUserId | No | The user performing the action — blocks self-demotion if it equals the target | |
| removeManager | No | Revoke org-manager grant (default: true) |