Role cannot be deleted, renamed or assigned; a user cannot deactivate themselves
Default roles and roles still held by users are never deleted (deactivate them instead), the Administrator role is locked, an inactive role cannot be given to anyone, you cannot switch off your own account, and only active users of your organization can own opportunities, tasks and workflow actions.
Messages this explains
- “Default roles cannot be deleted. Deactivate the role instead.”
- “Users still hold this role. Reassign them or deactivate the role instead of deleting it.”
- “The Administrator role always holds every permission and cannot be renamed or deactivated.”
- “Role <name> is inactive and cannot be assigned”
- “You cannot deactivate your own account.”
- “assigned_to must be an active user of this organization”
- “Not active users of this organization: …”
Role cannot be deleted, renamed or assigned; a user cannot deactivate themselves
You tried to tidy up roles and users and the app refused: a role would not delete, the Administrator role would not take a change, a role would not go onto a user, the toggle on your own account is greyed out, or a record would not accept the person you chose as its owner.
What you see
On Roles & Permissions, the Delete role? dialog fails with:
- "Default roles cannot be deleted. Deactivate the role instead." for any of the roles your organization started with (Administrator, Finance Lead, Project Manager, Accountant, Sales Manager, Compliance Officer, Auditor, Rehab Officer, Sales Executive, Site Engineer, Front Desk, Legal & Documentation). The trash icon is not offered on them; the message appears if the delete is attempted another way.
- "Users still hold this role. Reassign them or deactivate the role instead of deleting it." for a role of your own that at least one user still holds.
On Edit role, the Administrator role opens with the Locked badge and "Administrator always holds every permission and is kept in sync by the system." Its name, description and permissions are read-only there, and the list offers no Deactivate on it. If a change is attempted another way, such as through the AI assistant, the answer is "The Administrator role always holds every permission and cannot be renamed or deactivated."
On Users:
- "Role <name> is inactive and cannot be assigned" appears in the Invite New User banner or as the alert on the Edit user panel when the role you picked was deactivated after the page loaded. The Role lists offer active roles only, so this happens when someone else deactivates the role while you are working.
- Your own row has no Deactivate button, and on your own Edit user panel the Account active toggle is greyed out with "You cannot deactivate your own account." The same words come back if the change is attempted another way.
On New opportunity, Edit opportunity and the Assign opportunity dialog, and in the panel on Tasks, the banner "assigned_to must be an active user of this organization" means the Assigned to person is no longer an active user here.
On a workflow Rule, saving a rule whose Notify users, Create task (Assign to > A user), Assign opportunity or Update field action names a person who has been deactivated fails with "Not active users of this organization: …" in the banner at the top of the rule. The message ends with the person's internal reference rather than their name, so check each action that names a person.
Why it happens
The default roles are the organization's starting permission matrix and always stay; a role that users still hold cannot vanish from under them. Both are switched off instead: an inactive role grants nothing and cannot be assigned, but keeps its permissions in case it is needed again.
The Administrator role is what lets someone fix everything else. It holds every permission the system knows, including new ones as modules are added, so it is never renamed, trimmed or deactivated. Clone it if you want a similar role with fewer rights.
A user holds exactly one organization-wide role, and a role can only be given while it is active. You cannot deactivate yourself because deactivating an account signs it out at once: you would lock yourself out in the middle of the change, and could leave the organization without an administrator.
Owners of opportunities and tasks, and the people a workflow rule notifies or assigns to, must be active users of the same organization: a deactivated person cannot see, act on or be reminded about the work.
How to fix it
- To retire a role, press Deactivate on its row in Roles & Permissions and confirm Deactivate role?, or untick Role active on Edit role and Save role. You need the Edit permission on Roles & Permissions; in the default roles only the Administrator has it.
- To delete a role you created, first move its holders: on Users open each one with the pencil (Edit role & access), pick another Role and Save changes (the Edit permission on Users). The Users column on the roles list shows how many are left. Then press Delete on the role (the Delete permission on Roles & Permissions). Default roles never delete; deactivate them (step 1).
- To change what Administrator does, don't: press Clone on it, name the copy, and trim the copy's permissions (the Create permission on Roles & Permissions).
- To assign a role that is inactive, reactivate it first: Reactivate on its row (or tick Role active on Edit role), then invite or edit the user again.
- To deactivate your own account, ask another administrator to untick Account active on your row. If you are the only administrator, invite or promote another one first.
- For an inactive owner or assignee, pick an active user in Assigned to and save again, or reactivate the person on Users (Reactivate) if they are back. In a workflow rule, replace the person on the action card (or notify a role instead) and Save changes; you need the Edit permission on Workflow Rules.
Related
Related
- Roles & PermissionsScreen
The list of your organization's roles: open one, create or clone a role, deactivate or reactivate it, and delete custom roles nobody holds.
- Edit roleScreen
Change a role's name, description, active flag and permissions, see who holds it, and open its History.
- UsersScreen
The people in your organization: invite new users, change their role, deactivate or reactivate them, reset a lost two-factor authentication, and resend or revoke pending invitations.
- New opportunityScreen
Start a lead: the project, the buyer (a new person or an existing contact), where the enquiry came from, who works it, any channel partner to credit, and what the buyer is looking for.
- Edit opportunityScreen
Change an opportunity's lead source, owner, channel partner or requirements; the project and the buyer stay fixed, and only the fields you touch are saved.
- TasksScreen
Follow-ups for you and your team: add tasks by hand or let workflow rules raise them, link each to the record it is about, assign it, and mark it done.
- RuleScreen
One automation rule's page: read or change its basics, trigger, conditions and actions, test it against a record, clone or delete it, and switch a system rule on or off.