User management
When someone leaves, deactivate them rather than deleting: their history stays on every record they touched, and they're locked out until reactivated.
On People & access → Users, use the Deactivate user action on their row. They lose access immediately, active sessions are revoked, not just future logins, and stay locked out until an admin reactivates them.
Every organization has a primary owner, who must be an active org admin. Deactivating the current primary owner asks you to pick a replacement from your other active org admins (Transfer primary owner to). If there's nobody eligible, the app warns you that the org will have no primary owner until you assign one, invite or promote another admin first.
Reactivate user is a one-click action on a deactivated row, access returns with the same roles and grants they had before.
