Roles

[akhilrao]

I got the task of deactivating user from all the groups and removing his admin-roles from non-prod instance, but even after removing roles , his roles are still showing in non-prod instance, even though he has no group access and not active. Please assist me in this matter.

[Dr Atul G- LNG · Accepted solution]

Hi @akhilrao 

I tried this case in my PDI, and I removed all the roles and groups from the user, and it’s showing as blank now, meaning there are no roles under the user profile. Also, as you stated, if you mark it as deactivated, the user won’t be able to log in. Logically, it should not show the roles. Did you try clearing the cache and logging out, then logging back in?

[Ankur Bawiskar]

@akhilrao 

share how did you remove the roles via script or manual activity?

If my response helped please mark it correct and close the thread so that it benefits future readers.

[akhilrao]

@Ankur Bawiskar ,

Manually

Regards,

Akhil Rao

[Ankur Bawiskar]

@akhilrao 

did you check if the admin role that user received is a direct one and not via group?

If you remove user from group then that group role will be removed

But if some role was directly given and not via group, that will still be there

Better to use sys_user_has_role table and delete the records from there for that user for admin role

If my response helped please mark it correct and close the thread so that it benefits future readers.

[akhilrao]

@Ankur Bawiskar 

I checked the roles table and tried to remove the user but it didn't work.

Thanks & Regards,
Akhil Rao
akhil.rao@akzonobel.com
TCS ServiceNow Technical Support Team