In some circumstances, it may be necessary to prevent an existing user from logging in to LaunchPad and any "downstream" applications. 'Deactivating' the user is not the solution as a nightly sync would just reactivate that user from the source data. The solution is to change their "Login Enabled" flag from true to false in LaunchPad. 

Permissions Needed to Edit 'Login Enabled' Flag

Users at GDOE who you would like to handle this who will perform this task  will need permission to edit Users, specifically users with the District Admin or STC role.  See screenshot below for what that permission configuration would look like. I have already made the change so that District Admins have this permission.for each role that may contain users to disable. In the example below. The District Test Coordinator (District Admin) user is set up to be able to edit users the District Test Coordinator and School Test Coordinator roles. 

How to Change 'Login Enabled' Flag

For users who should not have access to log in, find and open user from the User search page. Then, from the Actions menu, click on the Edit User Info option. 

The outcome of this will be that these users will NOT have the ability to log in.