When you create a user from another user it automatically defaults the access level to the access of the user you are copying.
However, when you create a user from another user that has be deactivated, the access level is set to the max access level you are permitted to assign. The field should be left blank or there should be a preference for the default access level that should be applied, similar to the default access level on SSO auto-provisioning.
