Question

Difficulty: MediumUser Activation, Deactivation, and Freezing

A System Administrator at a commercial bank needs to immediately revoke system access for a contractor whose contract ended unexpectedly. When attempting to deactivate the user account, Salesforce displays an error stating that the user cannot be deactivated because they are currently designated as the Default Workflow User in Process Automation Settings. The administrator requires an immediate solution to block login access while reconfiguring the system settings. Which action should the administrator take?

  1. A
    Delete the user account from Salesforce to immediately remove login access and clear system dependencies.
  2. Freeze the user account to immediately block login access while the Default Workflow User reference is reassigned.Answer
  3. C
    Change the user profile to a read-only profile so that all data editing permissions and login rights are revoked.
  4. D
    Expire the user's password and change their username to an invalid email format to prevent authentication.

Answer

Freeze the user account to immediately block login access while the Default Workflow User reference is reassigned.
Freezing a user account immediately prevents the user from logging into Salesforce while preserving their current setup. This is ideal when a user cannot be deactivated right away due to dependencies like being assigned as the Default Workflow User or being referenced in active custom hierarchy fields.

Step-by-Step Solution

1
Identify the operational block preventing immediate deactivation.
The user account cannot be deactivated directly because Salesforce restricts deactivating users configured as the Default Workflow User.
Salesforce enforces system integrity by preventing deactivation of users tied to active process automation administration.
2
Determine the appropriate immediate access control action.
Freeze the user account from the user detail page.
Freezing immediately revokes login access without requiring background process dependencies to be removed first.
3
Complete maintenance and final account deactivation.
Reassign the Default Workflow User setting to a different active user, then deactivate the original user account.
This maintains security compliance immediately while allowing safe administrative cleanup before releasing the user license via deactivation.

Key Concept

Freezing vs. Deactivating Users in Salesforce when system dependencies exist.
Rate this question