Getting warning - "User is not authorized to perform this action" when removing user from group

[oosukeren]

So, in our dev environment we don't have any issues, in prod our team has less access, but we have the user admin role. We can add members to groups, but when we try to remove users from a group, we get:

I have tested all types of issues, we don't have any other customizations on ACL's or Business Rules other than active => false on the delete ACL, but when I recreated it in a PDI, it stills to work even then. Any suggestions/information would be helpful. I had stumbled upon a response to a forum post for the same Authorization issue, but the knowledge base shared has been since deleted, so I have no source I can use.

Thanks in advance!

[tharun_kumar_m · Accepted solution]

Hi oosukeren,

I tried to replicate your scenario in my PDI. When I deactivate the delete ACL "sys_user_grmember", as a admin I'm able to remove the members, but users with user_admin role were not able to remove the members.

So deactivating the ACL didn't allow the users to remove the members. Please confirm whether you have impersonated the user with user_admin role in your PDI.

If my answer has helped with your question, please mark my answer as accepted solution and give a thumbs up.

Best regards,

Tharun Kumar

[oosukeren]

Hello Tharun, thank you, yes, I confirmed in my instance, turns out that somehow not having any roles was using a way around and letting me remove users, but once I approved the role "user_admin" on the test user and tried again, I was able to get the expected result. Now when I know what's the cause, I can resolve it.

I'm marking your response as the solution.

[tharun_kumar_m]

Hi Oosukeren,

I'm glad I could help. Thanks for marking my answer as solution.