{"command":{"effect":"write","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Revokes a user's access across all applications.","properties":{"path":{"type":"object","properties":{"account_id":{"$ref":"#/definitions/access_identifier"}},"required":["account_id"],"additionalProperties":false},"query":{"type":"object","properties":{"devices":{"type":"boolean","examples":[true],"description":"When set to `true`, all devices associated with the user will be revoked."}},"required":[],"additionalProperties":false},"body":{"type":"object","properties":{"devices":{"description":"When set to `true`, all devices associated with the user will be revoked.","type":"boolean","examples":[true]},"email":{"description":"The email of the user to revoke.","type":"string","examples":["test@example.com"]},"user_uid":{"description":"The uuid of the user to revoke.","type":"string","examples":["699d98642c564d2e855e9661899b7252"]},"warp_session_reauth":{"description":"When set to `true`, the user will be required to re-authenticate to WARP for all Gateway policies that enforce a WARP client session duration. When `false`, the user’s WARP session will remain active","type":"boolean","examples":[true]}},"required":["email"]}},"required":["path","body"],"additionalProperties":false,"definitions":{"access_identifier":{"description":"Identifier.","type":"string","maxLength":32,"examples":["023e105f4ecef8ad9ca31a8372d0c353"]}}},"name":"Revoke all Access tokens for a user","id":"cloudflare.zero-trust-organization-revoke-all-access-tokens-for-a-user","example":{"path":{"account_id":"023e105f4ecef8ad9ca31a8372d0c353"},"body":{"email":"test@example.com"}},"maxRequests":1,"summary":false}}