How to remove a specific role of user, roles are inherited from the group that user is assigned.

[rkreddy]

Hi All,

I am trying to ITIL role from user who hasn't been logged in for 30days. But the thing here is user has got this role inherited from the ITIL group. So I need to remove only role, but not want to remove him from group. Is it possible?

Thanks

[Willem]

If the group gives you the ITIL role, and the user is part of that group, I am not sure it is a good idea to remove that role from that user.

That takes away from managing roles on Group level and leaves you with managing it on a user basis.

Is it an option to move the user to another group (like inactive-itil users). When the user is inactive you move them to that group. That way the role is removed and that group can be used to track those users.

[rkreddy]

Hi @Willem ,

Thanks for the response. Will removing user from group removes all the roles inherited from that group?

And also how to remove user from group and add him into another group within one script, could you please help?

[Willem]

Hi,

Yes, removing user from a group removes all roles inherited from that group.

Have a look at this topic on how to remove a user from the group with Flow designer:

https://community.servicenow.com/community?id=community_question&sys_id=71d742dedb9ed0149e691ea66896...

Add the conditions that apply to you, so the user must be your user and the group must be your ITIL group.

[rkreddy]

Hi,

Thank you. What are the steps that I need to add, to move him into the other Inactive ITIL group after removing him from Original ITIL group.