Question

Difficulty: MediumUser Management and Provisioning

An administrator at Cloud Kicks is notified that a operations lead is going on an extended sabbatical. The operations lead is currently designated as the default lead owner in active Lead Assignment Rules and is an assigned approver in several active Approval Processes. The administrator needs to prevent this user from logging into Salesforce immediately without disrupting existing automated processes or causing errors in pending workflow submissions. Which action should the administrator take to meet these requirements?

  1. Freeze the user account from the User setup page.Answer
  2. B
    Deactivate the user account and remove their assigned license.
  3. C
    Assign a custom Profile to the user that has all Object permissions removed.
  4. D
    Add the user's personal IP address to the Network Access settings under Security Controls.

Answer

Freezing the user account prevents login access while keeping the user record active as a reference in existing automated workflows and approval processes.
Freezing a user account immediately blocks authentication into Salesforce while keeping the record intact for running process references, such as default assignment rule targets or pending approval steps.

Step-by-Step Solution

1
Analyze the operational requirements and process dependencies.
Identified that the user is linked to active Lead Assignment Rules and Approval Processes, meaning complete deactivation would break automated executions.
Salesforce prevents or errors out on deactivation when a user is tied to specific automated system roles unless references are reassigned first.
2
Evaluate the administrative capabilities of Freezing versus Deactivating a user.
Freezing temporarily revokes login privileges without altering underlying assignments or user license availability.
Freezing is designed specifically for scenarios where immediate login block is required but workflow dependencies prevent immediate account deactivation.
3
Select the appropriate administrative action in Setup.
Navigate to Setup > Users and click Freeze on the target user record.
This achieves the dual goal of security enforcement and maintaining continuous system automation without runtime failures.

Key Concept

User Freezing vs. Deactivation
Rate this question