Only matrixadmin can provision accounts. Sessions expire automatically (server TTL); a disabled or deleted user loses every active session immediately.