diff --git a/web/src/admin/groups/MemberSelectModal.ts b/web/src/admin/groups/MemberSelectModal.ts
index b911e0213b..2843eb6405 100644
--- a/web/src/admin/groups/MemberSelectModal.ts
+++ b/web/src/admin/groups/MemberSelectModal.ts
@@ -5,15 +5,32 @@ import "@goauthentik/elements/buttons/SpinnerButton";
 import { PaginatedResponse } from "@goauthentik/elements/table/Table";
 import { TableColumn } from "@goauthentik/elements/table/Table";
 import { TableModal } from "@goauthentik/elements/table/TableModal";
+import { match } from "ts-pattern";
 
 import { msg } from "@lit/localize";
-import { TemplateResult, html } from "lit";
+import { TemplateResult, css, html } from "lit";
 import { customElement, property } from "lit/decorators.js";
 
-import { CoreApi, User } from "@goauthentik/api";
+import { CoreApi, CoreUsersListRequest, User } from "@goauthentik/api";
+
+// Leaving room in the future for a multi-state control if someone somehow needs to filter inactive
+// users as well.
+type UserListFilter = "active" | "all";
+type UserListRequestFilter = Partial<Pick<CoreUsersListRequest, "isActive">>;
 
 @customElement("ak-group-member-select-table")
 export class MemberSelectTable extends TableModal<User> {
+    static get styles() {
+        return [
+            ...super.styles,
+            css`
+                .show-disabled-toggle-group {
+                    margin-inline-start: 0.5rem;
+                }
+            `,
+        ];
+    }
+
     checkbox = true;
     checkboxChip = true;
 
@@ -24,11 +41,22 @@ export class MemberSelectTable extends TableModal<User> {
     @property()
     confirm!: (selectedItems: User[]) => Promise<unknown>;
 
+    userListFilter: UserListFilter = "active";
+
     order = "username";
 
+    // The `userListRequestFilter` clause is necessary because the back-end for searches is
+    // tri-state: `isActive: true` will only show active users, `isActive: false` will show only
+    // inactive users; only when it's _missing_ will you get all users.
     async apiEndpoint(): Promise<PaginatedResponse<User>> {
+        const userListRequestFilter: UserListRequestFilter = match(this.userListFilter)
+            .with("all", () => ({}))
+            .with("active", () => ({ isActive: true }))
+            .exhaustive();
+
         return new CoreApi(DEFAULT_CONFIG).coreUsersList({
             ...(await this.defaultEndpointConfig()),
+            ...userListRequestFilter,
             includeGroups: false,
         });
     }
@@ -41,6 +69,36 @@ export class MemberSelectTable extends TableModal<User> {
         ];
     }
 
+    renderToolbarAfter() {
+        const toggleShowDisabledUsers = () => {
+            this.userListFilter = this.userListFilter === "all" ? "active" : "all";
+            this.page = 1;
+            this.fetch();
+        };
+
+        return html`&nbsp;
+            <div class="pf-c-toolbar__group pf-m-filter-group">
+                <div class="pf-c-toolbar__item pf-m-search-filter">
+                    <div class="pf-c-input-group show-disabled-toggle-group">
+                        <label class="pf-c-switch">
+                            <input
+                                class="pf-c-switch__input"
+                                type="checkbox"
+                                ?checked=${this.userListFilter === "all"}
+                                @change=${toggleShowDisabledUsers}
+                            />
+                            <span class="pf-c-switch__toggle">
+                                <span class="pf-c-switch__toggle-icon">
+                                    <i class="fas fa-check" aria-hidden="true"></i>
+                                </span>
+                            </span>
+                            <span class="pf-c-switch__label">${msg("Show inactive users")}</span>
+                        </label>
+                    </div>
+                </div>
+            </div>`;
+    }
+
     row(item: User): TemplateResult[] {
         return [
             html`<div>${item.username}</div>