Removing roles from a User

[GaneshErike]

Hi,

One user is part of 7 groups. Out of those, one group was archived a long time ago, but the user is still showing as a member of that group. Some roles are being granted through this archived group.

I tried removing the user from that group in the test instance, but the roles are still present.

I need to remove the roles that were granted specifically by that archived group. Any idea why the roles are still there even after removing the user from the group? Or how I can clean this up properly?

Thanks.

[Dr Atul G- LNG]

Hi @GaneshErike 

The primary reason might be that the user is getting the role through another group, as roles can be inherited. So it’s difficult to pinpoint exactly which group is granting the user access.

[GaneshErike]

Hi @Dr Atul G- LNG,

Thanks for the response.

I am specifically looking for SPM Related roles like it_project_manager, it_project_user.

In sys_user_has_role table, it is showing these roles are granted by That Archived Group.

[Dr Atul G- LNG]

Hi @GaneshErike 

So you need to see what other group that user is member has this specific role. 

[AshishKM]

Hi @GaneshErike ,

"one group was archived a long time ago" means group marked as active = false and all associated role(s) removed from that group. If role(s) not removed yet then remove it first. 

After the above step, check if user still hold the same role(s) then check the inheritance map for source of that role.

-Thanks,

AshishKM