Department Administratorsand users with a custom role may activate or deactivate only users belonging to the departments they manage or their daughter departments.
The user doesn't have enough permissions to activate or deactivate users. For example, Department Administrators can't activate or deactivate users who don't belong to the departments they manage.