---
title: "Adding or removing users to the Denylist with the Admin UI"
slug: "denylist-v6-6"
description: "Manage user access with our denylist feature. Easily add or restore users, ensuring security by stopping unauthorized sign-ins from any device."
tags: ["Active Sessions", "Denylist", "User Access"]
updated: 2026-02-05T18:46:59Z
published: 2026-02-05T18:46:59Z
canonical: "support.appgate.com/denylist-v6-6"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Denylist

The **Denylist** page (Usage > Denylist) lists all users who have been denied access to the system. It also provides the option to restore users added to the denylist.

Adding a user to the denylist stops all active sessions for that user. By putting their details on the denylist, it prevents them from signing in to the system from any device.

If you want to prevent a specific device from being used to sign in, such as a device that has been stolen, try the [on-boarding option](/v1/docs/device-registration-v6-6) related to Registered Devices or a [stop Policy](/v1/docs/using-policies-v6-6).

Use the **+Add** button to add a user to the denylist. You can also use the action buttons in [Active Sessions](/v1/docs/active-sessions-v6-6) or [Registered Devices](/v1/docs/registered-devices-v6-6) to add users to the denylist.

You can re-enable a user on the denylist from the action button next to that user’s name.

## Background information

For more information on user access, see the [Disable, change or remove access](/v1/docs/disable-change-or-remove-access-v6-6#adding-a-user-to-the-denylist) section.

## Adding a user to the Denylist

To add a user to the Denylist:

1. Click the **+Add** button.
2. In the **Add User to Denylist** window, enter the *Username*, *Identity Provider*, and a *Reason*.
3. Click **Add** to finish adding the user.

## Action Buttons

Action buttons are accessed by clicking the three dots icon (![Three circular shapes stacked vertically on a dark background, selected to access a menu.](https://cdn.us.document360.io/e7482ce5-acfa-4c3b-b76c-b6c32472644a/Images/Documentation/three_dots.png?sv=2026-02-06&spr=https&st=2026-10-26T22%3A38%3A59Z&se=2026-10-26T23%3A38%3A59Z&sr=c&sp=r&sig=4yA6Atv%2BzeKG6YE0JMvcEjWzwsdVJ16j%2BWF3BtP%2FRjw%3D)) to the right of each line item in the page or from the <Actions> button within the item. They are contextual, changing depending on the type of item and the state of the item. The Action button in the Denylist page displays the following option:

- ***Restore user***. Removes the user’s details from the denylist. The user will need to sign in again before access is granted.

> [!NOTE]
> NOTE
> 
> This does not restore a connection to the Gateways if an active session was stopped. The user will need to sign in again.