diff --git a/apps/sim/app/workspace/[workspaceId]/settings/components/admin/admin.tsx b/apps/sim/app/workspace/[workspaceId]/settings/components/admin/admin.tsx
index 5105cb404f3..f316f1f1294 100644
--- a/apps/sim/app/workspace/[workspaceId]/settings/components/admin/admin.tsx
+++ b/apps/sim/app/workspace/[workspaceId]/settings/components/admin/admin.tsx
@@ -227,123 +227,128 @@ export function Admin() {
                 <div
                   key={u.id}
                   className={cn(
-                    'flex items-center gap-3 px-3 py-2 text-small',
+                    'flex flex-col gap-2 px-3 py-2 text-small',
                     'border-[var(--border-secondary)] border-b last:border-b-0'
                   )}
                 >
-                  <span className='w-[200px] truncate text-[var(--text-primary)]'>
-                    {u.name || '—'}
-                  </span>
-                  <span className='flex-1 truncate text-[var(--text-secondary)]'>{u.email}</span>
-                  <span className='w-[80px]'>
-                    <Badge variant={u.role === 'admin' ? 'blue' : 'gray'}>{u.role || 'user'}</Badge>
-                  </span>
-                  <span className='w-[80px]'>
-                    {u.banned ? (
-                      <Badge variant='red'>Banned</Badge>
-                    ) : (
-                      <Badge variant='green'>Active</Badge>
-                    )}
-                  </span>
-                  <span className='flex w-[250px] justify-end gap-1'>
-                    {u.id !== session?.user?.id && (
-                      <>
-                        <Button
-                          variant='active'
-                          className='h-[28px] px-2 text-[12px]'
-                          onClick={() => handleImpersonate(u.id)}
-                          disabled={pendingUserIds.has(u.id)}
-                        >
-                          {impersonatingUserId === u.id ||
-                          (impersonateUser.isPending &&
-                            (impersonateUser.variables as { userId?: string } | undefined)
-                              ?.userId === u.id)
-                            ? 'Switching...'
-                            : 'Impersonate'}
-                        </Button>
-                        <Button
-                          variant='active'
-                          className='h-[28px] px-2 text-[12px]'
-                          onClick={() => {
-                            setUserRole.reset()
-                            setUserRole.mutate({
-                              userId: u.id,
-                              role: u.role === 'admin' ? 'user' : 'admin',
-                            })
-                          }}
-                          disabled={pendingUserIds.has(u.id)}
-                        >
-                          {u.role === 'admin' ? 'Demote' : 'Promote'}
-                        </Button>
-                        {u.banned ? (
+                  <div className='flex items-center gap-3'>
+                    <span className='w-[200px] truncate text-[var(--text-primary)]'>
+                      {u.name || '—'}
+                    </span>
+                    <span className='flex-1 truncate text-[var(--text-secondary)]'>{u.email}</span>
+                    <span className='w-[80px]'>
+                      <Badge variant={u.role === 'admin' ? 'blue' : 'gray'}>
+                        {u.role || 'user'}
+                      </Badge>
+                    </span>
+                    <span className='w-[80px]'>
+                      {u.banned ? (
+                        <Badge variant='red'>Banned</Badge>
+                      ) : (
+                        <Badge variant='green'>Active</Badge>
+                      )}
+                    </span>
+                    <span className='flex w-[250px] justify-end gap-1'>
+                      {u.id !== session?.user?.id && (
+                        <>
+                          <Button
+                            variant='active'
+                            className='h-[28px] px-2 text-[12px]'
+                            onClick={() => handleImpersonate(u.id)}
+                            disabled={pendingUserIds.has(u.id)}
+                          >
+                            {impersonatingUserId === u.id ||
+                            (impersonateUser.isPending &&
+                              (impersonateUser.variables as { userId?: string } | undefined)
+                                ?.userId === u.id)
+                              ? 'Switching...'
+                              : 'Impersonate'}
+                          </Button>
                           <Button
                             variant='active'
-                            className='h-[28px] px-2 text-caption'
+                            className='h-[28px] px-2 text-[12px]'
                             onClick={() => {
-                              unbanUser.reset()
-                              unbanUser.mutate({ userId: u.id })
+                              setUserRole.reset()
+                              setUserRole.mutate({
+                                userId: u.id,
+                                role: u.role === 'admin' ? 'user' : 'admin',
+                              })
                             }}
                             disabled={pendingUserIds.has(u.id)}
                           >
-                            Unban
+                            {u.role === 'admin' ? 'Demote' : 'Promote'}
                           </Button>
-                        ) : banUserId === u.id ? (
-                          <div className='flex gap-1'>
-                            <EmcnInput
-                              value={banReason}
-                              onChange={(e) => setBanReason(e.target.value)}
-                              placeholder='Reason (optional)'
-                              className='h-[28px] w-[120px] text-caption'
-                            />
+                          {u.banned ? (
                             <Button
-                              variant='primary'
+                              variant='active'
                               className='h-[28px] px-2 text-caption'
                               onClick={() => {
-                                banUser.reset()
-                                banUser.mutate(
-                                  {
-                                    userId: u.id,
-                                    ...(banReason.trim() ? { banReason: banReason.trim() } : {}),
-                                  },
-                                  {
-                                    onSuccess: () => {
-                                      setBanUserId(null)
-                                      setBanReason('')
-                                    },
-                                  }
-                                )
+                                unbanUser.reset()
+                                unbanUser.mutate({ userId: u.id })
                               }}
                               disabled={pendingUserIds.has(u.id)}
                             >
-                              Confirm
+                              Unban
                             </Button>
+                          ) : (
                             <Button
                               variant='active'
-                              className='h-[28px] px-2 text-caption'
+                              className={cn(
+                                'h-[28px] px-2 text-caption',
+                                banUserId === u.id
+                                  ? 'text-[var(--text-primary)]'
+                                  : 'text-[var(--text-error)]'
+                              )}
                               onClick={() => {
-                                setBanUserId(null)
-                                setBanReason('')
+                                if (banUserId === u.id) {
+                                  setBanUserId(null)
+                                  setBanReason('')
+                                } else {
+                                  setBanUserId(u.id)
+                                  setBanReason('')
+                                }
                               }}
+                              disabled={pendingUserIds.has(u.id)}
                             >
-                              Cancel
+                              {banUserId === u.id ? 'Cancel' : 'Ban'}
                             </Button>
-                          </div>
-                        ) : (
-                          <Button
-                            variant='active'
-                            className='h-[28px] px-2 text-[var(--text-error)] text-caption'
-                            onClick={() => {
-                              setBanUserId(u.id)
-                              setBanReason('')
-                            }}
-                            disabled={pendingUserIds.has(u.id)}
-                          >
-                            Ban
-                          </Button>
-                        )}
-                      </>
-                    )}
-                  </span>
+                          )}
+                        </>
+                      )}
+                    </span>
+                  </div>
+                  {banUserId === u.id && !u.banned && (
+                    <div className='flex items-center gap-2 pl-[200px]'>
+                      <EmcnInput
+                        value={banReason}
+                        onChange={(e) => setBanReason(e.target.value)}
+                        placeholder='Reason (optional)'
+                        className='h-[28px] flex-1 text-caption'
+                      />
+                      <Button
+                        variant='primary'
+                        className='h-[28px] px-3 text-caption'
+                        onClick={() => {
+                          banUser.reset()
+                          banUser.mutate(
+                            {
+                              userId: u.id,
+                              ...(banReason.trim() ? { banReason: banReason.trim() } : {}),
+                            },
+                            {
+                              onSuccess: () => {
+                                setBanUserId(null)
+                                setBanReason('')
+                              },
+                            }
+                          )
+                        }}
+                        disabled={pendingUserIds.has(u.id)}
+                      >
+                        Confirm Ban
+                      </Button>
+                    </div>
+                  )}
                 </div>
               ))}
             </div>
diff --git a/apps/sim/lib/auth/auth.ts b/apps/sim/lib/auth/auth.ts
index 6aa989e720b..d11f77eb183 100644
--- a/apps/sim/lib/auth/auth.ts
+++ b/apps/sim/lib/auth/auth.ts
@@ -80,6 +80,7 @@ import { quickValidateEmail } from '@/lib/messaging/email/validation'
 import { scheduleLifecycleEmail } from '@/lib/messaging/lifecycle'
 import { captureServerEvent } from '@/lib/posthog/server'
 import { syncAllWebhooksForCredentialSet } from '@/lib/webhooks/utils.server'
+import { disableUserResources } from '@/lib/workflows/lifecycle'
 import { SSO_TRUSTED_PROVIDERS } from '@/ee/sso/constants'
 import { createAnonymousSession, ensureAnonymousUserExists } from './anonymous'
 
@@ -241,6 +242,13 @@ export const auth = betterAuth({
           }
         },
       },
+      update: {
+        after: async (user) => {
+          if (user.banned) {
+            await disableUserResources(user.id)
+          }
+        },
+      },
     },
     account: {
       create: {
diff --git a/apps/sim/lib/workflows/lifecycle.ts b/apps/sim/lib/workflows/lifecycle.ts
index c5ecbb639c7..df1638dce48 100644
--- a/apps/sim/lib/workflows/lifecycle.ts
+++ b/apps/sim/lib/workflows/lifecycle.ts
@@ -1,6 +1,7 @@
 import { db } from '@sim/db'
 import {
   a2aAgent,
+  apiKey,
   chat,
   form,
   webhook,
@@ -8,12 +9,14 @@ import {
   workflowDeploymentVersion,
   workflowMcpTool,
   workflowSchedule,
+  workspace,
 } from '@sim/db/schema'
 import { createLogger } from '@sim/logger'
 import { and, eq, inArray, isNull } from 'drizzle-orm'
 import { env } from '@/lib/core/config/env'
 import { getRedisClient } from '@/lib/core/config/redis'
 import { PlatformEvents } from '@/lib/core/telemetry'
+import { generateRequestId } from '@/lib/core/utils/request'
 import { mcpPubSub } from '@/lib/mcp/pubsub'
 import { getWorkflowById } from '@/lib/workflows/utils'
 
@@ -361,3 +364,29 @@ export async function archiveWorkflowsByIdsInWorkspace(
     options
   )
 }
+
+/**
+ * Disables all resources owned by a banned user by archiving every workspace
+ * they own (cascading to workflows, chats, forms, KBs, tables, files, etc.)
+ * and deleting their personal API keys.
+ */
+export async function disableUserResources(userId: string): Promise<void> {
+  const requestId = generateRequestId()
+  logger.info(`[${requestId}] Disabling resources for banned user ${userId}`)
+
+  const { archiveWorkspace } = await import('@/lib/workspaces/lifecycle')
+
+  const ownedWorkspaces = await db
+    .select({ id: workspace.id })
+    .from(workspace)
+    .where(and(eq(workspace.ownerId, userId), isNull(workspace.archivedAt)))
+
+  await Promise.all([
+    ...ownedWorkspaces.map((w) => archiveWorkspace(w.id, { requestId })),
+    db.delete(apiKey).where(eq(apiKey.userId, userId)),
+  ])
+
+  logger.info(
+    `[${requestId}] Disabled resources for user ${userId}: archived ${ownedWorkspaces.length} workspaces, deleted API keys`
+  )
+}