Add Admin Controls for Bulk Chat History Deletion

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Description

Following the successful implementation of configurable retention periods for GitLab Duo Chat, this issue proposes implementing additional administrative controls to manage chat history in self-managed instances:

1. Enable instance owners to bulk-delete all user Chat history across the instance
2. Enable instance owners to delete an individual user's Chat history

These capabilities would complement the existing retention settings by providing on-demand controls for compliance, security incidents, and data management.

Problem to solve

Customers with strict data access policies need more immediate control over chat history beyond scheduled retention periods. Design partners have expressed strong support for these features, noting they are critical for:

• Security incident response
• User offboarding scenarios
• Compliance requirements
• Instance-wide cleanup needs

Suggested solution

Add two new controls in the Admin Area:

1. Instance-wide Chat Delete
   • Button with appropriate confirmation dialog
   • Warning about non-reversible action
2. Per-user Chat Delete
   • Add deletion option in user management interface
   • Ability to search/select users for deletion

Business value

As expressed by design partners, these features will:

• Support compliance with data minimization requirements
• Enable emergency response to security incidents
• Provide tools for flexible business processes
• Support proper user offboarding workflows

Definition of Done

• Instance owners can bulk-delete all Duo Chat history across the instance
• Instance owners can delete an individual user's Duo Chat history
• Appropriate confirmation steps to prevent accidental data loss
• logging of deletion operations
• Documentation updated to include these new capabilities