The Danger zone tab on a team detail page includes two high-risk actions: Disable team, available to anyone with permission to change team status, and Transfer owner, visible only to the team's actual owner.
- Disabling or enabling a team requires the permission to change team status (
team:update_status). The team owner has it by default, but this permission can also be granted to other members through a custom role — it is not owner-exclusive. - Disabling a team requires a recent security check. If you have not verified your identity with your password, a passkey, TOTP, or an email code within the last hour, selecting Disable team first redirects you to a verification page; the action continues automatically once you pass it. Inside that one-hour window, you go straight to the confirmation dialog described below.
- Only team-managed members are affected by disabling a team. A "standard member" — someone participating with their own standalone account — keeps their account mode and space unchanged.
- The interface text for both actions on this tab is available only in Simplified Chinese. The button labels, descriptions, confirmation dialogs, and success toasts are hardcoded strings that are not translated — they display in Simplified Chinese regardless of your dashboard's interface language. This page quotes them as they actually appear.
- Transferring ownership requires the permission to transfer team ownership (
team:transfer_owner), and it can only ever be exercised by whoever is currently recorded as the team's actual owner. Unlike most team permissions, this one cannot be granted to another member through a custom role — a team admin who holds every other permission still cannot transfer ownership; only the owner can. - Transferring ownership requires the same recent security check as disabling a team — the one-hour window described above applies here too.
- The new owner must already be a member of the team, and their account must be a standalone account, not a team-managed one. You cannot transfer ownership to someone outside the team or to a team-managed member.
- Ownership cannot be transferred while the team is disabled. Re-enable the team first.
| What happens | What does not happen |
|---|---|
| The team's status changes to Disabled | The team record is not deleted, and no membership records are deleted |
Every team-managed member in the team is immediately converted to a standalone account, and current_space_type switches back to their personal space |
Standard members are not affected — their account mode and space stay exactly as they were |
| The platform creates or confirms a personal billing account for each converted account | Existing resources in the team, such as instances and storage, are not deleted — the release only changes the user's tenancy fields |
| A status-change entry is recorded in the audit log | Any balance the team owed is not automatically carried over to these new personal accounts (see the open question below) |
| When you disable the team yourself from the console, the platform also sends a notification email to the owner and admins | That email is not sent when a platform administrator force-disables the team from the admin backend |
| The status can be switched back to Enabled at any time | Re-enabling the team does not restore the released accounts to team-managed mode — there is no automatic recovery path |
- Open the team detail page and select the Danger zone tab.
- Select Disable team.
- If you have not completed a security check in the last hour, complete the verification page first.
- Confirm the dialog. Its text is hardcoded in Simplified Chinese: "确认禁用团队「团队名」？" ("Disable team "team-name"?"). Select the confirm button to proceed.
Submitting the dialog immediately shows a toast reading, in Simplified Chinese, "团队已禁用" ("Team disabled"), and every team-managed member is already a standalone account by that point.
Re-enabling the team: the status label reads "停用" ("Disabled"), and the action changes to Enable team. Selecting it and confirming the dialog — its text, also hardcoded in Simplified Chinese, reads "确认启用团队「团队名」？" ("Enable team "team-name"?") — shows a "团队已启用" ("Team enabled") toast, but this only flips the status field back. Accounts that were already released remain standalone; they are not automatically reclaimed as team-managed. The only way to bring those members back into team-managed mode is to send them a new team-managed invitation.
The team's actual owner can hand the team over to another member using Transfer owner. This does not remove the current owner from the team.
| What happens | What does not happen |
|---|---|
| The target member's team role changes to Owner | The target member is not automatically added to the team — they must already be a member; the member picker excludes the current owner from the list |
| The current owner's team role changes to Admin, and they remain a team member | The current owner is not removed from the team, and does not lose access to team-governance features covered by the default admin role |
| The team's billing account owner field is updated to the new owner, and their billing permissions are synced to the full set | The outgoing owner's permissions on the team's billing account are not preserved — they are cleared, along with the ability to change team status (unless separately granted) |
A team:transfer_owner entry is recorded in the audit log |
Projects, instances, and other resources owned by the team are not affected — they remain the team's |
| The platform sends a notification email to both the outgoing and the new owner | — |
- Open the team detail page and select the Danger zone tab.
- Select Transfer owner. Only the actual owner sees this action.
- If you have not completed a security check in the last hour, complete the verification page first.
- In the dialog, pick the new owner from the member dropdown (owners are excluded from the list). If the team has no other members, the dialog falls back to a plain user-ID field instead — but the entered user must still already be a team member, or the transfer is rejected.
- Confirm the dialog. Its text is hardcoded in Simplified Chinese, reading "确认转移「团队名」的团队所有权？" ("Confirm transferring team ownership of "team-name"?"). Select the confirm button to proceed.
Submitting the dialog immediately shows a toast reading, in Simplified Chinese, "团队所有权已转移" ("Team ownership transferred"). The new owner's role becomes Owner and the previous owner's role becomes Admin in the same request; both receive the notification email.
Is this reversible? Yes, but there is no dedicated undo — because the permission to transfer ownership belongs only to whoever currently holds the owner role, the demoted former owner cannot reclaim it unilaterally. The new owner has to run Transfer owner again and pick the former owner as the target, the same way any other transfer works.
What the previous owner can still do afterward: as an admin, they keep team-governance permissions — managing members and invitations, viewing the audit log, managing roles and groups, sharing images, and managing, deleting, and configuring billing for instances in the team's space. What they no longer have is anything owner-exclusive (starting another transfer, and by default, changing the team's enabled status) and any permission on the team's billing account itself — the new owner has to grant those separately if intended.