xpack.security.disableUser

edit
client.xpack.security.disableUser({
  username: string,
  refresh: 'true' | 'false' | 'wait_for'
})

Reference

username

string - The username of the user to disable

refresh

'true' | 'false' | 'wait_for' - If true (the default) then refresh the affected shards to make this operation visible to search, if wait_for then wait for a refresh to make this operation visible to search, if false then do nothing with refreshes.