Great question and an important one for you to be clear about.
Skuser will only ever ‘toggle’ the activation status between two Salesforce Users. If there’s not a user to activate, Skuser won’t deactivate.
Skuser provides two additional checkboxes on User object, paired with validation rules
-
- Do Not Activate checkbox with a validation rule that fires if Do Not Activate is checked and the user Active checkbox is also checked
-
- Do Not Deactivate checkbox with a validation rule that fires if Do Not Deactivate is checked and the user Active checkbox is not checked
System Administrators
Skuser will only every run and process its jobs IF AND ONLY IF there at least one user with the System Administrator profile AND with the Do Not Deactivate checkbox checked on their user record.
There are scenarios where Skuser may be unable to deactivate a Salesforce User due to Salesforce requiring the user to be active under certain circumstances (e.g. the user is the Default Lead Owner) – some of the mandatory active scenarios are listed here.
In addition to at least one System Administrator having the Do Not Deactivate checkbox checked, we recommend that a System Administrator is specified in one of the mandatory active scenarios listed here.

