Manage who can sign in, what role they hold and whether their account is active.
Changing a role or setting a non-active status revokes that user's sessions immediately.