There are two main options here. One is to update the user record by GETting the record, changing the "active" field and then PUTting it back. The other is basically what you describe here: create a sub resource /users/1234/active and then POST to it to activate and DELETE from it to deactivate. Hope that helps!