Experimental endpoint — not yet a stable contract. This action ships as experimental / beta. While experimental, its schema and behaviour may change without a version bump — including breaking changes within v1.0 itself. Anyone consuming it does so for evaluation only, or by coordinating adoption with their account manager so changes can be sequenced with them. It graduates to a stable, version-locked contract (where the normal breaking-change rules apply) only when this experimental notice is removed.

End the selected active tracked browser sessions for the target administrator. Unselected sessions, remembered browser access and application access are unchanged.

The authenticated Public API principal must itself be a concrete human global or operator administrator, not an API-only administrator. The target must also be a concrete human global or operator administrator. Existing administrator-management permissions, role hierarchy and operator scope apply; another administrator is never substituted for the authenticated principal.

Obtain session IDs from the administrator sessions listing. Supply between 1 and 100 distinct UUIDs. Every selected session must still be active and belong to the target administrator when the action executes. A 409 indicates a selection-state conflict, including a session that has ended, expired or no longer belongs to the eligible selection; no selected sessions are ended on conflict. A 422 indicates malformed input, including a missing, empty, oversized or duplicate selection, or a malformed UUID.

A successful 202 response has data.outcome equal to selected_sessions_ended and includes endedSessionCount. Includes are not supported.