Problem Definition

Currently, there's no way to kill a user session if a user is found to be calling requests which could slow down the overall performance of application or requires a password change.

Suggested Solution

Add an administration utility to end particular user session.

Workaround

• If a user gets disabled using the REST API , their session is killed and they will see a 'not permitted' error screen.
• How to force all users of Atlassian on-prem products to re-authenticate their sessions on the browser