Removing roles from a User

[GaneshErike]

Hi,

One user is part of 7 groups. Out of those, one group was archived a long time ago, but the user is still showing as a member of that group. Some roles are being granted through this archived group.

I tried removing the user from that group in the test instance, but the roles are still present.

I need to remove the roles that were granted specifically by that archived group. Any idea why the roles are still there even after removing the user from the group? Or how I can clean this up properly?

Thanks.

[GaneshErike]

Hi @AshishKM,

Thanks for the response.

I have removed user from the archived group in Test instance, but still roles are there and in sys_user_has_role table, it is showing roles are granted by this Archived Group.

Thanks.

[AshishKM]

Can you please share the screen shot of that user record with Inherited, Inheritance Count and Inheritance Map column value. If inherited it true source then check the Inheritance Map to know the source path of role.

[GaneshErike]

Inherited is true, I can't find the Inheritance count or inheritance path fields.

[Sumalatha Y]

Hi,

Check how role is granted to user like is it by archived group or some other group? If it is by archived group, please check if roles are still linked with to archived group (in the table sys_group_has_role). If yes first remove roles from archived group and then remove user from group.

If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." 

[GaneshErike]

Hi Sumalatha,

It is granted by archived group. I am not able to see roles in archived group, it is in read only form.