[Yandex Cloud documentation](../../index.md) > [Yandex Identity Hub](../index.md) > [Step-by-step guides](index.md) > Managing users > Managing user sessions

# Managing user sessions

An administrator can view and end Yandex Identity Hub [sessions](../concepts/sessions.md) of the organization's [federated](../../iam/concepts/users/accounts.md#saml-federation) and [local](../../iam/concepts/users/accounts.md#local) users. The [organization](../concepts/organization.md) roles the administrator needs for that are [`organization-manager.federations.userAdmin`](../security/index.md#organization-manager-federations-userAdmin) and [`organization-manager.userpools.userAdmin`](../security/index.md#organization-manager-userpools-userAdmin) or higher, respectively.

{% note warning %}

The sessions of a user with a Yandex account can be [viewed](manage-account.md#view-sessions) and [terminated](manage-account.md#end-sessions) by this exact user only.

{% endnote %}

## Viewing user sessions {#view-sessions}

To view the active sessions of a federated or local user of the organization:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Log in to [Yandex Identity Hub](https://center.yandex.cloud/organization).
  1. In the left-hand panel, select ![person](../../_assets/console-icons/person.svg) **Users** and select the [federated](../../iam/concepts/users/accounts.md#saml-federation) or [local](../../iam/concepts/users/accounts.md#local) user from the list that opens.

      To find the right user faster, use the filter at the top of the screen.
  1. In the window that opens, go to the **Active sessions** tab.

      The list that opens will contain the following information about the selected user’s sessions:

      * **User-Agent**: Client application [ID](https://en.wikipedia.org/wiki/User_agent). Constant value.
      * **Creation date**: Session creation date and time. Constant value.
      * **Date of use**: Date and time the session was last used for authentication in applications that rely on Yandex Identity Hub as an identity provider. The value may change while working with the session.
      * **End date**: Session [lifetime](../concepts/sessions.md#session-lifetime) after which the user will have to re-authenticate to Yandex Identity Hub. Constant value.
      * **IP address**: IP address of the user’s last access within the active session to services that require authentication via Yandex Identity Hub. The value may change while working with the session.
      * **ID**: Unique session ID. Constant value.

{% endlist %}

## Terminating user sessions {#end-sessions}

To terminate the active sessions of a federated or local user of the organization:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Log in to [Yandex Identity Hub](https://center.yandex.cloud/organization).
  1. In the left-hand panel, select ![person](../../_assets/console-icons/person.svg) **Users** and select the [federated](../../iam/concepts/users/accounts.md#saml-federation) or [local](../../iam/concepts/users/accounts.md#local) user from the list that opens.

      To find the right user faster, use the filter at the top of the screen.
  1. In the window that opens, go to the **Active sessions** tab. 

      The list that opens will contain information about the selected user’s sessions.
  1. To terminate a specific session:
  
      1. In the session row, click ![ellipsis](../../_assets/console-icons/ellipsis.svg) and select ![arrow-right-from-square](../../_assets/console-icons/arrow-right-from-square.svg) **End**.
      1. In the window that opens, confirm the termination.

      As the result, the user will cease to have access to services that use Yandex Identity Hub as an identity provider from the selected device.
  1. To terminate all the user's sessions:

      1. In the top-right corner, click ![arrow-right-from-square](../../_assets/console-icons/arrow-right-from-square.svg) **End all sessions**.
      1. In the window that opens, confirm the termination of all sessions.

      As a result, the user will cease to have access to services that use Yandex Identity Hub as an identity provider from all devices.
      
  To resume access, the user will have to re-authenticate in Yandex Identity Hub.

{% endlist %}

#### Useful links {#see-also}

* [Sessions](../concepts/sessions.md)
* [Managing an account on the My account portal](manage-account.md)