Currently Artifactory offers no way for us to interactively disable an account in the system - triggered for example when someone leaves the company, or for whatever reason.
As a workaround for this, we would have to go in and individually revoke API keys, along with tokens and ssh pubic keys for e.g. git-lfs ssh auth.
There should be an admin-level API to force disable an account, which would automatically block all attempts to authorise as that account for any reason (so catching API key, ssh, UI login, etc). It could also optionally remove the user from any/all groups.