Accounts
Deactivating blocks all future logins, everywhere, and can be undone. It doesn't end a session already in progress: apps check a token's signature rather than asking this service, so one already issued keeps working until it expires (12 hours).