PUT /_security/user/<username>/_disable

By default, when you create users, they are enabled. You can use this API to revoke a user’s access to Elasticsearch. To re-enable a user, there is an enable users API.

For more information about the native realm, see Realms and Configuring a native realm.

To use this API, you must have at least the manage_security cluster privilege.

The following example disables the user jacknich:

PUT /_security/user/jacknich/_disable