Easy enable/disable user in Canary System

Hello,

It would be really great to have an easy enable/disable user access, disabling entirely the user from anything that can be done in the system. As of today, this can only be achieved by creating a group and explicitly denying permissions to anything in Canary. 

This supports the need to have inactive users in the system to record who has had access (system of record) - recording when the user has been enabled/disabled in the system would be key information (even with a reason comment to enable/disable it). 

Thanks