Terminate User Accounts

This topic describes how you can terminate a user account when an employee leaves your enterprise. The process outlined in this topic applies if you're using Oracle ERP Cloud service only. If your enterprise also uses Oracle HCM Cloud service, then a different process

Manually Suspend User Accounts

When an employee leaves your enterprise, in most cases it's best practice to inactivate the user account. Inactivating the user's account prevents the user from being able to log in to the application.

To manually suspend a user account, ERP administrators follow these steps:

1. Select Navigator > My Team > Users and Roles to open the Search Person page.

   You can also search for the Manage Users task in the Setup and Maintenance work area.

2. Search for and select the user whose account you want to inactivate to open the Edit User page.

3. In the User Details section of the Edit User page, set the Active field to Inactive. You can reactivate the account by setting the Active value back to Active.

4. Click Save and Close.

IT Security Managers can lock user accounts on the Security Console. Locking a user account on the Security Console or setting it to Inactive on the Edit User page prevents the user from signing in.

Note: Role provisioning isn't affected by the manual suspension and reactivation of user accounts. For example, when you reactivate a user account manually, the user's autoprovisioned roles aren't updated unless you click Autoprovision Roles on the Edit User page. Similarly, a suspended user account isn't reactivated when you click Autoprovision Roles. You must explicitly reactivate the user account first.

Remove Roles from a User

Instead of inactivating a user account, you can remove some or all of the roles assigned to the user. You might want to do this if you want to keep some roles active. For example, maybe you want to keep the user account valid to allow the user access to specific pages you have created.

These are the steps to selectively remove roles from a user.

1. Select Navigator > My Team > Users and Roles to open the Search Person page.

   You can also search for the Manage Users task in the Setup and Maintenance work area.

2. Search for and select the user whose roles you want to remove.

   The Edit User page for the user opens.

3. In the Current Roles section, select the role you want to remove, then click the Remove icon. Repeat this process for each role assigned to the user that you want to remove.

4. Click Save and Close.

Automatically Suspend User Accounts

By default, user accounts are suspended automatically when a user has no roles. This automatic suspension of user accounts is controlled by the User Account Maintenance enterprise option.

Users can acquire roles automatically at termination, if an appropriate role mapping exists. In this case, the user account remains active.