Disable a User in ERPNext
ERPNext allows administrators to disable user accounts when access to the system needs to be revoked temporarily or permanently. This feature is particularly useful when employees leave the organization, change roles, or when specific users should no longer be allowed to access company data.
Disabling a user prevents them from logging into ERPNext while preserving all their existing configurations, permissions, and historical records.
Disabling a user does not delete their account. All settings, permissions, and linked records remain intact and can be restored by re-enabling the user.
How to Disable a User
Follow these steps to disable an existing user account:
- Search for User List using the Awesome Bar.
- Open the user record you want to disable.
- Locate the Enabled checkbox.
- Uncheck the Enabled option.
- Save the document.
Once saved, the user will immediately lose access to the ERPNext system.
What Happens When a User is Disabled?
After disabling a user:
- The user can no longer log in to ERPNext.
- The account is marked as Disabled in the User List.
- Existing permissions and role assignments are retained.
- Historical transactions and activity records remain unchanged.
- Linked employee and business records continue to function normally.
This ensures that business data remains accurate while preventing further system access.
Re-Enabling a User
If access needs to be restored later, the user account can be reactivated at any time.
To re-enable a user:
- Open the disabled user record.
- Check the Enabled checkbox.
- Save the document.
Once re-enabled, the user regains access with all previously configured roles, permissions, and settings.
Re-enabling a user restores their account exactly as it was before being disabled, without requiring any additional configuration.
When Should You Disable a User?
Disabling users is recommended in scenarios such as:
- Employee resignation or termination.
- Temporary leave of absence.
- Contract completion.
- Security concerns or unauthorized access investigations.
- Role changes requiring temporary access suspension.
In most cases, disabling a user is preferable to deleting the account because it preserves audit trails and historical data.
Benefits of Disabling Instead of Deleting
ERPNext follows a security-first approach by allowing accounts to be disabled rather than removed.
Advantages include:
- Preserves transaction history.
- Maintains document ownership records.
- Retains permissions and user settings.
- Supports audit and compliance requirements.
- Allows quick account restoration when needed.
TIP
When employees leave the organization, disable their ERPNext account immediately rather than deleting it. This preserves historical records while preventing unauthorized access.
Best Practices
- Disable user accounts promptly when employees leave.
- Review disabled users periodically to maintain system hygiene.
- Use role and permission reviews alongside user disabling.
- Keep audit trails intact by avoiding unnecessary account deletion.
- Document reasons for disabling users as part of internal security procedures.
Related Topics
- User Management
- Change Password
- Role Based Permissions
- User Permissions
- System Settings
SUMMARY
The Disable User feature in ERPNext allows administrators to revoke system access without deleting user accounts. Disabled users cannot log in, while all roles, permissions, settings, and historical records remain preserved. Accounts can be re-enabled at any time, making this the recommended approach for managing inactive or departed users.
