---
title: "Managing Locked Accounts"
slug: "managing-locked-and-disabled-accounts"
description: "How to create delegations (lists) of locked and disabled accounts with actions to resolve the issue."
tags: ["Administrator", "Delegations"]
updated: 2022-09-09T14:53:07Z
published: 2022-09-09T14:53:07Z
canonical: "help.rapididentity.com/managing-locked-and-disabled-accounts"
deprecated: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.rapididentity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Locked and Disabled Accounts

> **Deprecated.** This article version is deprecated. A Locked Account Delegation appears by default for Administrators.

## How to Manage Locked or Disabled Users Accounts

RapidIdentity Cloud user accounts can become **locked** when the maximum number of failed logins is exceeded and they can become **disabled** via an administrative or automated action.

When a user account is locked or disabled, the user is prohibited from accessing their account.

To gain visibility into which user accounts are locked or disabled and take corrective actions, a People module Delegation can be created. This delegation lists the users meeting specific criteria such as **locked** or **disabled** and provides actions to remediate, **unlock** or **enable**, them.

#### Follow these steps to create this delegation:

#### 

          Note:

          

You must have administrative privilages such as Portal Administrator or Tenant Administrator to create and manage delegations

1. Clone and modify an existing delegation by navigating to People > Settings > Delegations ![image.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/image%28138%29.png)
2. Select the checkbox for the **Other Profiles** delegation, or any delegation of your choice, and **Clone** it. ![image.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/image%28139%29.png)
3. Locate the newly copied delegation and click **Details** to configure it.
4. Set the **General** tab settings to the following:
  1. Enabled:  checked
  2. Name:  Disabled or Locked User Accounts
  3. Description:  User accounts which are disabled or locked and related actions.
  4. Preload All Results:  checked
  5. Delegation Source:  add or remove Appliance Roles as needed
  6. Delegation Target:  (&(objectClass=idautoPerson)(|(pwdAccountLockedTime=*)(idautoDisabled=TRUE)))
5. Click the **Attributes** button to edit attribute settings and display two relevant items:

          Note:

          

Feel free to add, remove or change other attributes as desired

![image.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/image%28140%29.png)
  1. Locate and edit these attributes to **Show In List**:
    1. Account Disabled
    2. Account Locked
    3. Click Update button to apply the changes
6. Set the Actions tab to include the following actions: *(other actions are optional)*
  1. Change Password
  2. Enable
  3. Unlock
7. **Save** the changes to the Delegation

#### Follow these steps to use the new newly created delegation:

#### 

1. Locate the Delegation in the sidebar delegations list and select it.

          Note:

          

Users which are either locked and disabled will be listed with their status in the respective columns.
2. Check the box for the user(s) you want to take action on.
3. Click the appropriate action for the user account. ![image.png](https://cdn.document360.io/4d958006-b877-42af-8de5-00e3bb7fe41d/Images/Documentation/image%28141%29.png)

          Note:

          

If only **locked** user accounts are of interest in the delegation:

- Use this **Delegation Target** value instead: (&(objectClass=idautoPerson)(pwdAccountLockedTime=*))
- Do not Show In List the **Account Disabled** attribute