I'm not sure whether reading back the info is the weird stuff or whether blocking targets of attempted password logins rather than the source of the attempts is

I'm not sure whether reading back the info is the weird stuff or whether blocking targets of attempted password logins rather than the source of the attempts is the odd part. But I too can disable accounts of my colleagues in my company's ERP.