Question

Difficulty: HardUser Activation, Deactivation, and Freezing

A Salesforce Administrator at a cybersecurity firm must immediately revoke access for a departing DevOps Lead. However, attempting to deactivate the user account results in a system error because the user is currently designated as the Default Workflow User and is referenced in custom hierarchy fields. Which two administrative actions should be performed to satisfy the security requirement while cleanly resolving the system dependencies? (Select 2 answers)

  1. Freeze the user account immediately to block system logins without interrupting background automated processes.Answer
  2. Reassign the Default Workflow User setting to another active administrator, then deactivate the original user account.Answer
  3. C
    Deactivate the user account immediately, allowing Salesforce to automatically reassign custom hierarchy fields and workflow ownership to the user's manager.
  4. D
    Change the user's profile to Minimum Access - Salesforce to automatically release the user license while preserving background workflow execution.

Answer

Freeze the user account immediately to block logins without disrupting automated processes, and reassign the Default Workflow User setting to another active administrator before deactivating the original user account.
Freezing a user account is the recommended immediate action when a user must be blocked from logging in right away but cannot be deactivated due to active system references (like being the Default Workflow User). Once those dependencies are manually reassigned to another active user, the administrator can deactivate the user account to release the Salesforce user license.

Step-by-Step Solution

1
Evaluate immediate access restriction requirement
Freezing the account immediately prevents login while system dependencies exist.
Freezing does not require removing references in system settings or hierarchy fields.
2
Resolve system configuration dependencies
Change the Default Workflow User to another active administrative user record.
Deactivation is blocked by Salesforce as long as the user is set as the Default Workflow User.
3
Deactivate the user account
Deactivate the user record to release the user license back to the organization pool.
Once critical dependencies are reassigned, deactivation can complete successfully.

Key Concept

Distinction between freezing (immediate access revocation without license release or dependency disruption) and deactivating (license release requiring manual dependency resolution).
Estimated Time:2m 0s
Rate this question