can't able to deactivate an user

HARI KISHAN GVS
Mega Sage

Hi Team,

When i tried to deactivate an user(making active false) i am getting below error messgae and record is not updated.

"The user cannot be inactivated as it would leave fewer than the configured 1 active application administrators"

"Invalid update"

Please let me know what needs to be done here to deactivate that user.

HARIKISHANGVS_0-1727074255694.png

Thanks in advance,

Hari Kishan.

 

1 ACCEPTED SOLUTION

Amit Verma
Kilo Patron
Kilo Patron

Hi @HARI KISHAN GVS 

 

The answer to your problem lies in the logic of the OOB Business Rule "Ensure min active admin remains" on sys_user table which refers to a Script Include "ScopedAdministration". As per this Script Include logic, at least 1 application administrator should remain active. Refer below screenshot  :

AmitVerma_0-1727079543303.png

 

I suspect your user is the only application administrator for some custom application that's why you are not able to mark it inactive. You can go through your Company Applications and see if the user is mapped somewhere or go through the user roles and see if any custom application admin role is mapped to the user.

 

Thanks and Regards

Amit Verma


Please mark this response as correct and helpful if it assisted you with your question.

View solution in original post

3 REPLIES 3

Dr Atul G- LNG
Tera Patron
Tera Patron

Hi @HARI KISHAN GVS 

 

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0857988

 

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/atul_grover_lng [ Connect for 1-1 Session]

****************************************************************************************************************

Hi AG,

The above article suggests/ regarding removing admin role from user record, BUT in my case i am trying to deactivate a user record. NOT removing admin role from user record.

and my user doesn't have admin role as well.

Thanks,

Hari Kishan.

Amit Verma
Kilo Patron
Kilo Patron

Hi @HARI KISHAN GVS 

 

The answer to your problem lies in the logic of the OOB Business Rule "Ensure min active admin remains" on sys_user table which refers to a Script Include "ScopedAdministration". As per this Script Include logic, at least 1 application administrator should remain active. Refer below screenshot  :

AmitVerma_0-1727079543303.png

 

I suspect your user is the only application administrator for some custom application that's why you are not able to mark it inactive. You can go through your Company Applications and see if the user is mapped somewhere or go through the user roles and see if any custom application admin role is mapped to the user.

 

Thanks and Regards

Amit Verma


Please mark this response as correct and helpful if it assisted you with your question.