CRT-101 · Question #231
An administrator gets a rush request from Human Resources to remove a user's access to Salesforce Immediately. The user is part of a hierarchy field called Direct Manager. What should the…
The correct answer is A. Freeze the user to prevent them from logging in while removing them from being referenced in. Freezing a user immediately blocks login access without requiring removal of hierarchy field references first, satisfying the urgent request while preserving data integrity.
Question
An administrator gets a rush request from Human Resources to remove a user's access to Salesforce Immediately. The user is part of a hierarchy field called Direct Manager. What should the administrator do to fulfil the request?
Options
- AFreeze the user to prevent them from logging in while removing them from being referenced in
- BDeactivate the user and delete any records where they are referenced in the Direct Manager field.
- CChange the user's profile to read-only while removing them from being referenced in the Direct
- DDelete the user and leave all records where they referenced in the Direct Manager Field without
How the community answered
(25 responses)- A76% (19)
- B12% (3)
- C4% (1)
- D8% (2)
Why each option
Freezing a user immediately blocks login access without requiring removal of hierarchy field references first, satisfying the urgent request while preserving data integrity.
Freezing a user in Salesforce instantly prevents them from logging in without triggering the restriction that blocks deactivation when a user is still referenced in a hierarchy field like Direct Manager. This satisfies the immediate access removal requirement while giving the admin time to reassign or clear those field references before completing a full deactivation.
Salesforce will block the deactivation of a user still referenced in a hierarchy custom field, so the admin cannot complete this action immediately and the rush requirement cannot be met.
Changing a profile to read-only restricts what the user can do inside Salesforce but does not prevent them from logging in, which fails the core requirement of immediate access removal.
Salesforce does not permit deletion of users who own or are referenced in records, making this option technically unavailable in a standard org.
Concept tested: Freezing users to immediately revoke Salesforce access
Source: https://help.salesforce.com/s/articleView?id=sf.users_freeze.htm
Topics
Community Discussion
No community discussion yet for this question.