# account_unavailable

The right password for an account an administrator suspended or blocked (403).

## Meaning

Sent by `POST /v1/auth/sign-in` only when `auth.brute_force.reveal_lockout` is on,
and only after the right password, so it says nothing to someone who does not hold
the account. With it off, the same attempt answers `invalid_credentials`.

## Impact

The user sees "This account is unavailable. Contact your administrator." It is
expected for a suspended or blocked account.

## Diagnosis

Look the request id up on the Troubleshooting page; the attempt is recorded as
`auth.sign_in.completed` with reason `account_unavailable`. The account's status and
the reason given for it are on the user's page in the dashboard and in the
`user.suspended` or `user.blocked` record.

## Mitigation

- As a user: contact your organization's administrator.
- As an administrator: reactivate the account
  (`POST /v1/admin/orgs/{slug}/users/{id}/reactivate`) if the suspension was a
  mistake or has served its purpose.

## Escalation

Escalate when an active account is answered this way. Open an issue with the
request id, the account's status as the admin API reports it and the server version.

---

[Problem code runbooks](https://www.nauthera.io/docs/v1/runbooks/problems) · Generated from [`internal/runbook/problems.yaml`](https://github.com/nauthera/nauthera-server/blob/main/internal/runbook/problems.yaml) in nauthera-server.