You need to be either a Global Administrator, Identity Repository Administrator, or have at least User Manager entitlements to disable a directory user.
Disabling a directory user revokes the current user session and removes user access to any of the PingOne services or applications for your account. You can subsequently re-enable the user.