Account Archival & Deletion

Purpose  - Provide a controlled way to deactivate accounts, both by an administrator and by the user themselves. 

Who Can Use It 

• School Admin: archive, unarchive, delete single, and batch-delete users within their school. 
• DHE Admin: soft-delete users and maintain school user records. 
• Any logged-in user: delete their own account. 

Key Capabilities 

• Archive User: sets the account inactive; the user can no longer sign in. 
• Unarchive User: reactivates an archived account and forces re-login by bumping the token version. 
• Delete User: soft-deletes a single user. 
• Batch Delete: soft-deletes multiple users in a single operation with partial-failure reporting. 
• Delete My Account: end-user self-service. For a School Admin this also archives the corresponding school record; for an Employee it archives the corresponding employee record. 

Rules & Restrictions 

• Deleted or archived accounts are blocked at login and cannot be selected as the target of a session switch. 
• Self-deletion archives the account (soft delete); it does not remove data.
• Session tokens issued before archival or unarchival are invalidated by the token-version bump. 
• If a sibling record cannot be archived (School or Employee record), the local Auth account is still archived and the failure is logged.