Currently after a refresh from production to sandbox env, all users except the admin are disabled. The admin will then enable the users, either manually or via the addin.

It would be easier if this re-enablement was managed by a "keep enabled after DB refresh" flag or through a role (as is the case with the user for maintenance)