# Request: separate API granular API scope for 'suspend user"

**URL:** <https://meta.discourse.org/t/request-separate-api-granular-api-scope-for-suspend-user/249928>\
**Category:** Feature\
**Tags:** rest-api\
**Created:** [December 27, 2022, 1:31am UTC](https://meta.discourse.org/t/request-separate-api-granular-api-scope-for-suspend-user/249928 "2022-12-27T01:31:05Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![mattdm](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mattdm/32/216484_2.png) [@mattdm](https://meta.discourse.org/u/mattdm)\
**Post date:** [December 27, 2022, 1:31am UTC](https://meta.discourse.org/t/request-separate-api-granular-api-scope-for-suspend-user/249928/1 "2022-12-27T01:31:05Z")

</div>

This is hopefully a small one. I would like to have a script which runs periodically and automatically suspends users whose accounts are disabled, locked, or otherwise removed in our centralized account system.

This is easily done through the API [Discourse API Docs](https://docs.discourse.org/#tag/Admin/operation/suspendUser). However, there appears to be no granular API scope covering just this. Since there _are_ scopes for Delete and Anonymize, hopefully this would not be too hard to add.

With this limitated scope, compromise of this key could let someone be annoying — but not incredibly disruptive otherwise.

---

_[View the full topic](https://meta.discourse.org/t/request-separate-api-granular-api-scope-for-suspend-user/249928)._