<p>You need to check if the normal user has an administrate permission, you can check at user -&gt; permission. Even a normal user you still can give it an administrate user permission without change it into a admin user, but this permission is off by default for normal user.</p>

CC BY-SA 4.0
2020-11-13T10:49:45.510Z
The user had Administrate permissions indeed. I managed to contact the user and revert the deletion of my account. But there was a second problem, the account was also suspended (automated after deletion) The user in question could not lift this due a 403 Forbidden... This was weird. So I had to dive into the database and found the admin user there and managed to change the suspended status back.

I think this should be protected, the Admin account should never be able to be deleted in my opinion.
Kevon
CC BY-SA 4.0
2020-11-11T03:54:04.673Z
2020-11-11T03:54:04.673Z
aodihis
<p>A created user was able to delete the Admin account, now I can't log in Craft anymore with an admin account. How is it possible that a normal user can delete an Admin?</p>
<p>I'm in contact with this user to try and re-activate the Admin account because I think the Soft delete is at work here, so fingers crossed!</p>

<craft3><admin><login><soft-deletes>
A user deleted my craft Admin account, what to do?
# A user deleted my craft Admin account, what to do?

(Asked by: username_0 on 2020-11-10)

A created user was able to delete the Admin account, now I can't log in Craft anymore with an admin account. How is it possible that a normal user can delete an Admin?

I'm in contact with this user to try and re-activate the Admin account because I think the Soft delete is at work here, so fingers crossed!

**Tags:** craft3, admin, login, soft-deletes


---

## 1 answers

### Answer by username_1 on 2020-11-11. Score: 1

You need to check if the normal user has an administrate permission, you can check at user -> permission. Even a normal user you still can give it an administrate user permission without change it into a admin user, but this permission is off by default for normal user.

> **Comments:**
> **username_0**: The user had Administrate permissions indeed. I managed to contact the user and revert the deletion of my account. But there was a second problem, the account was also suspended (automated after deletion) The user in question could not lift this due a 403 Forbidden... This was weird. So I had to dive into the database and found the admin user there and managed to change the suspended status back.  I think this should be protected, the Admin account should never be able to be deleted in my opinion.  

---

