Disable API access for an organization user in Vultr IAM to revoke their ability to authenticate requests to the Vultr API using any of their API keys.
Disabling API access restricts a user from interacting with the Vultr account programmatically. This revokes the ability to authenticate to the Vultr API using that user's API keys, including requests made through the Vultr CLI or other API clients.
Follow this guide to disable API access for a user using the Vultr API or the Vultr CLI.
Send a GET request to the List Users endpoint to retrieve all users and note the target user's id.
$ curl "https://api.vultr.com/v2/users" \
-X GET \
-H "Authorization: Bearer ${VULTR_API_KEY}"
Send a PATCH request to the Update User endpoint to disable API access for the user. Replace {user-id} with the id from the previous step.
$ curl "https://api.vultr.com/v2/users/{user-id}" \
-X PATCH \
-H "Authorization: Bearer ${VULTR_API_KEY}" \
-H "Content-Type: application/json" \
-d '{
"api_enabled": false
}'
A successful update returns an HTTP 202 Accepted response.
Send a GET request to the Get User endpoint to retrieve the user details. Replace {user-id} with the user id.
$ curl "https://api.vultr.com/v2/users/{user-id}" \
-X GET \
-H "Authorization: Bearer ${VULTR_API_KEY}"
Verify that api_enabled shows false.
List all users and note the target user's ID.
$ vultr-cli users list
Disable API access for the target user by specifying the user ID.
$ vultr-cli users update <user-id> \
--api-enabled="false"
Run vultr-cli users update --help to view additional available options.