When you create a user from another user it automatically defaults the
access level to the access of the user you are copying.However, when you
create a user from another user that has be deactivated, the access
level is set to the max access level you are permitted to assign. The
field should be left blank or there should be a preference for the
default access level that should be applied, similar to the default
access level on SSO auto-provisioning.