Unlock Tenant User
POST/api/v1/tenant-admin/users/:user_id/unlock
Clear a brute-force lock on a user within the tenant.
Five wrong-password attempts lock an account for 15 minutes. This endpoint resets the lock state so the user can sign in immediately. Mirrors suspend/activate access rules: admin can unlock members, owner can unlock anyone except themselves. Idempotent — calling on an already-unlocked target returns 200.
Rate limited per (tenant, target user): at most 3 unlocks per hour.
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 422
- 429
- 500
Successful Response
Cannot unlock yourself
Unauthorized
Tenant admin role required, or admin trying to unlock another admin/owner
User not found
Validation Error
Per-target unlock quota exceeded (3/hour)
Server error