Why can my API call show GlobalProtect users but cannot disconnect them?

[gdo3]

Help Needed! I've been having this issue for a while now. I have a ticket open; yet, I am not able to get this API call to disconnect the connected GP gateway users. It's throwing me an 'invalid username' error each time, when I try to force-logout the user.

Any help spotting the issue is appreciated!

>>> kickOut = requests.get('https://labfirewall.example.com/api/?type=op&key=MYKEYHERE&cmd=<request><global-protect-gateway><client-logout><user>theuser</user><reason>force-logout</reason><gateway>Dummy_Gateway-N</gateway><computer>MACHINENAME</computer></client-logout></global-protect-gateway></request>')
>>> soup = bs(kickOut.content, 'html.parser')
>>> print(soup)
<response status="success"><result>
<response status="error">
<gateway>Dummy_Gateway-N</gateway>
<user>theuser</user>
<computer>MACHINENAME</computer>
<error>Invalid user name</error>
</response>
</result></response>
>>>

[gdo3 · Accepted solution]

I was missing the <domain>exampledomain</domain<> parameter in my API call