Troubleshoot "Unable to Deactivate a User" in Salesforce

Active Validation Rule on the User Object

A validation rule on the User object can prevent the Active field from being set to false. This is the most common cause . The validation rule may have been created to enforce data quality on user records but inadvertently blocks deactivation.

User Is Referenced in Active System Configurations

Salesforce blocks deactivation when the user is assigned to specific system roles, Like : Default Lead Owner, Default Case Owner, Default Workflow User, approval process approver.

Step 1 — Freeze the User Immediately (Optional but Recommended) if you'd like to restrict the access to that user.

1. Navigate to Setup > Users > Users and click the user's name.
2. Click Freeze to immediately block the user's access while you resolve deactivation blockers.
3. Freezing does not free up a license but prevents login right away.

Step 2 — Check for Blocking Validation Rules

1. Navigate to Setup > Object Manager > User > Validation Rules.
2. Review active validation rules for any that reference the IsActive field or apply conditions that would fail when setting Active = false.
3. Deactivate any blocking validation rules temporarily.
4. Retry deactivating the user.
5. Re-enable the validation rule after deactivation completes, or edit it to exclude the deactivation scenario using ISCHANGED(IsActive).

Step 3 — Resolve System Configuration Dependencies

1. Default Workflow User: Setup > Process Automation Settings > change the Default Workflow User to an active admin.
2. Default Lead Owner: Setup > Lead Settings > update the Default Lead Owner.
3. Default Case Owner: Setup > Support Settings > update the Default Case Owner.
4. Approval Process Approver: Review all active approval processes and replace or add a delegated approver.
5. Workflow Email Alert Recipient: Update the email alert to use a queue or another user.

Step 4 — Deactivate the User

1. Navigate to Setup > Users > Users.
2. Click Edit next to the user.
3. Uncheck the Active checkbox.
4. Click Save.

Note: After deactivation, the user's records, owned folders, and Chatter group memberships are not automatically reassigned. Transfer ownership of records and reassign the user's Chatter groups manually.

FAQ

Q: I deactivated the validation rule but still cannot deactivate the user. What else should I check?

Review the full blockers list: Default Workflow User, Default Lead Owner, Default Case Owner, approval process approver, workflow email alert recipient, and custom hierarchy fields. Navigate to Setup > Users and check the user's related lists for active dependencies.

Q: I need to revoke access immediately but cannot complete deactivation right now.

Use the Freeze action on the user record. This blocks all login access immediately without requiring deactivation. The user's license is still consumed until the user is fully deactivated.

Q: The default workflow user was set to the user I'm trying to deactivate. How do I find this?

Go to Setup > Process Automation Settings. The Default Workflow User field shows the current setting. Change it to an active System Administrator before attempting deactivation.

Q: After deactivating the user, will their data be deleted?

No. All records owned by the deactivated user remain intact. The user's name still appears on records they owned. You must manually transfer ownership if needed.