Question

Difficulty: MediumUser Activation, Deactivation, and Freezing

A Salesforce Administrator at a global telecommunications company must immediately revoke system access for a departing regional operations director. However, when the administrator attempts to deactivate the user record, Salesforce prevents the action because the user is currently assigned as the Default Workflow User in the organization's Process Automation settings. What is the correct immediate action the administrator should take to secure the organization while resolving this dependency?

  1. Freeze the user account to instantly prevent login access, then reassign the Default Workflow User setting before deactivating the user record.Answer
  2. B
    Deactivate the user account directly by enabling the mass-deactivation override setting in Process Automation Settings.
  3. C
    Delete the user account from Setup to release the user license and automatically reassign workflow dependencies to the System Administrator.
  4. D
    Change the user's profile to Minimum Access - Salesforce, which revokes login privileges while maintaining workflow references.

Answer

Freeze the user account to instantly prevent login access, then reassign the Default Workflow User setting before deactivating the user record.
Freezing a user account immediately blocks authentication into Salesforce without requiring immediate removal of system dependencies such as being designated as the Default Workflow User. Once frozen and secured, the administrator can reassign the Default Workflow User role to another active user and proceed with deactivating the account to release the Salesforce user license.

Step-by-Step Solution

1
Identify the immediate security requirement versus the system dependency constraint.
System access must be revoked immediately, but deactivation is blocked because the user is designated as the Default Workflow User.
Deactivating a user who is designated as a Default Workflow User or referenced in active hierarchy fields throws a system error.
2
Evaluate the difference between freezing and deactivating a user account.
Freezing halts login access immediately without breaking automated processes or requiring immediate dependency reassignment.
Freezing temporarily stops authentication while keeping the user license allocated and references intact.
3
Determine the proper administrative sequence.
Freeze the user account first to secure the environment, update Process Automation settings to point to another user, and then deactivate the user account to free up the license.
This two-step process satisfies both urgent security needs and system maintenance requirements.

Key Concept

User Freezing vs. User Deactivation
Rate this question