Two Factor Auth - Admin Disable

Endpoint

/i/two-factor-auth?method=admin_disable

Overview

Disables 2FA for a target user (admin operation).

Authentication

Pass api_key or auth_token as a query parameter, or send countly-token as a header. See Authentication.

Permissions

Requires Global Admin.

Request Parameters

Parameter	Type	Required	Description
method	String	Yes	Must be admin_disable.
api_key	String	Yes (or use auth_token)	API key for authentication.
auth_token	String	No	Auth token as query parameter or countly-token header.
uid	String	Yes	Target user id.

Examples

Admin disable target user 2FA

/i/two-factor-auth?api_key=YOUR_API_KEY&method=admin_disable&uid=65f1f7b2ad5b9b001f12ab34

Response

Success Response

{
  "result": "Disabled 2FA for user"
}

Response Fields

Field	Type	Description
result	String	Result message.

Error Responses

• 400

{
  "result": "User id required"
}

• 500

{
  "result": "Database error while disabling 2FA"
}

• 404

{
  "result": "User does not exist"
}

Behavior

• Sets two_factor_auth.enabled=false and removes two_factor_auth.secret_token for target user.
• Emits system log action: two_factor_auth_disabled with user_id payload.

Related Endpoints

• Two Factor Auth - Admin Check

Implementation details

Database Collections

Collection	Used for	Data touched by this endpoint
countly.members	User account settings	Disables target user 2FA and removes secret.
countly.systemlogs	Audit trail	Receives two_factor_auth_disabled action.