Unblocking restores a user's ability to sign in. The right approach depends on why they were blocked — automatic failed-attempt bans are typically safe to lift; admin-blocks need investigation first.
Step-by-Step
- Open Architect Panel → Blocked User Accounts.
- Find the user (search by email).
- Click Unblock.
- Decide whether to additionally:
- Force a password reset on next sign-in (recommended after suspicious activity).
- Clear the failed-attempt counter (always tick — otherwise they may get re-blocked on the very next attempt).
- Send a notification email explaining the unblock.
- Confirm.
Self-Service Unblock
Auto-blocks can be configured to lift themselves after a cooldown (e.g. 15 minutes). For routine fat-finger lockouts, this is much friendlier than asking the user to call support.
Worked Examples
- Forgotten password: User typed wrong password 5 times. Verify identity by callback, unblock with password reset forced, send notification.
- After credential theft: Account was admin-blocked because of an alert. Investigate the access log, change the password to a temporary value, unblock, force password change, enrol in 2FA.
- Bulk maintenance: 50 inactive accounts blocked by quarterly review. Re-evaluate each, unblock those still needed, leave the rest blocked or delete.