roles are not being passed to child groups
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-10-2026 10:08 AM
The role did pass on to the child groups and members in dev but not in other instances, it has been more than 24 hours since the parent was assigned the role.
How can I check if something is happening on the backend and roles are being assigned.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-10-2026 01:43 PM
Hello @TahiraS
Were this role and group moved to other instances manually? or is this Sync / scheduled job / integration which does this mapping to other instances?
Check if there is automation syncing between your instances you need to check that. Usually, the role adds in group sync from prod to lower environment based on the sync /automation.
But you can check are there any automation/ integration running to sync the groups and roles
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Diagnostic Steps
1. Check sys_user_has_role directly:
- Navigate to sys_user_has_role.list → filter by granted_by = {parent_group_sys_id} and role = {role_name}
- If records exist in DEV but not in other instances, the inheritance job hasn't run
2. Check sys_user_group hierarchy:
- Verify parent field on child groups matches the parent group sys_id in both instances
- If parent references differ, inheritance won't trigger
3. Check the Role Inheritance Scheduled Job:
- sysauto_script.list → search for "Role Inheritance" or "Group Role Inheritance"
- Verify it's Active = true in the target instance
- Check sys_trigger for its last run time and state
4. Check glide.sys.user.role.inheritance property:
- Navigate to sys_properties.list → filter name = glide.sys.user.role.inheritance
- Must be true — if false or missing, roles won't cascade
5. Check sys_user_grmember records:
- Confirm users are actually members of the child groups in the target instance
6. Force re-evaluation:
- Background Script: new SNC.RoleSyncer().syncAllGroupRoles();
- Or toggle the role off/on on the parent group
