Skip to content

Active sessions

The Users & Groups surface lets you inspect a member’s active administrator sessions. Sessions are viewed per member, from that member’s User security dialog in the Team section — the same dialog that shows their auth events. Use it to spot where a member is signed in from during a security review or offboarding.

A member's User security dialog on the Users & Groups surface, showing the Auth events and Active sessions tabs with a per-session list of IP and last-active time.
Users & Access → Users & Groups → Team → member's User security dialog → Active sessionsCitadel synthetic data on a non-production Arbitex demo instance. Never client data.
  1. Open Users & Access → Users & Groups and find the member in the Team section’s roster.

  2. Open that member’s User security dialog from the roster row.

  3. Switch to the Active sessions tab (next to Auth events). Each active session shows the session’s IP and last-active time. If the backing is not available yet, the tab shows “Session visibility is coming soon”; if the member has none, it shows “No active sessions.”

A member’s active sessions are read (admin role) from the Team authoring seam. This endpoint is a stub on the shipped build — it returns an empty set with backing_available: false until per-member session visibility lands:

Terminal window
curl -X POST "https://admin.arbitex.ai/api/v1/admin/users-access/team/members/sessions" \
-H "Authorization: Bearer $ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{"identity_id": "$MEMBER_ID"}'
# → { "backing_available": false, "sessions": [] }

The Active sessions view is available on every plan.

Session records live in the control-plane database. On a Hybrid Outpost, admin sessions are tracked by the customer-managed control plane.