This user status can have one of the two values of active or inactive. We may add more status values if it becomes worthwhile.

A quick way to deny users all access to all tools and (sub)accounts is to change their status to inactive.