Sign Everyone Out
POST
/v1/endpoints/{uuid}/rbac/sessions/revoke-all
Sign every user of an endpoint out of every browser: each browser's next request gets the sign-in page. The sign-out takes effect within seconds in every region. Use it in an incident, or after a change everyone should sign in again for. In the dashboard: Sign everyone out in Sign-in & access › Sign-in, under Sessions.
Nobody is blocked: people sign in again as usual. Access tokens and API keys keep working: they aren't browser sessions. To stop one user's token, set them to disabled with PUT .../status; to stop an API key, delete it.
The answer counts who was signed in just before, like GET .../rbac/sessions. To sign everyone out with a settings change (for example while you switch a sign-in method off), send "sign_out_everyone": true with PUT /v1/endpoints/{uuid}/settings instead.
Path parameters
Request body
None — empty body or {}.
Response (200 OK)
Every browser that signed in up to this time is signed out.
How long a browser stays signed in on this endpoint.
"Everyone is signed out. Access tokens and API keys keep working."
Errors
Caller lacks the endpoints:delete permission in the active account.
Endpoint doesn't exist or doesn't belong to the calling account.
The endpoint has no sign-in: This endpoint has no sign-in, so no one is signed in to it.
curl -X POST \
"https://api.ngris.com/v1/endpoints/019bb1e4-e785-77d2-9966-c3cff31d0a0e/rbac/sessions/revoke-all" \
-H "X-API-KEY: <your_api_key>" \
-H "Content-Type: application/json"
ngris api endpoint-users sign-out-everyone 019bb1e4-e785-77d2-9966-c3cff31d0a0e --yes
from ngris import Ngris
client = Ngris(api_key="<your_api_key>")
ep = "019bb1e4-e785-77d2-9966-c3cff31d0a0e"
c = client._get_raw(f"/endpoints/{ep}/rbac/sessions")
print(f"Signing out {c['users']} users on {c['browsers']} browsers")
result = client._post_raw(f"/endpoints/{ep}/rbac/sessions/revoke-all", {})
print(result["message"])
{
"endpoint_uuid": "019bb1e4-e785-77d2-9966-c3cff31d0a0e",
"users": 6,
"browsers": 9,
"browsers_by_method": {"password": 5, "sso": 2},
"older_sign_ins": 2,
"signed_out_before": "2026-11-11T10:47:12Z",
"session_ttl_seconds": 14400,
"message": "Everyone is signed out. Access tokens and API keys keep working."
}
{
"error": "This endpoint has no sign-in, so no one is signed in to it."
}