Allow system admins to disable users

[chapmanio]

Allow users to be disabled or re-enabled from the admin panel. This should enable or disable the user in Cognito.

This could be helpful when allowing 3rd parties to use the system to then retrospectively remove accounts which should not have access.

---

Original Issue

Currently users can have their access to the application changed. Is this sufficient if a user has left the company or should no longer be an admin user?

Should we include an option to remove them completely from the database?

[danielrbradley]

Registered users can be disabled or deleted within the AWS Cognito console. Deleting registered users doesn't achieve anything beyond cleaning up rows in the Cognito database as Cognito is configured to allow anyone to create an account (this is how the OTAC system is implemented).

[chapmanio]

In that case, simply changing the users access to default may be sufficient? I was just concerned that users who may have left the business may still appear in the admin screens - which is irritating, if not a big problem.